Basic scripting concepts for penetration test automation, including common languages and use cases, tested on the CompTIA PenTest+ exam.
30 cards · basic cards · AI-written, checked twice. Edit anything.
- Which scripting language is most popular for penetration testing automation?
Show answer
Python- What is PHP commonly used for in penetration testing?
Show answer
Testing web applications and server-side vulnerabilities- What is the primary use of PowerShell in penetration testing?
Show answer
Automating Windows system administration and management tasks- Which scripting framework integrates Ruby for penetration testing?
Show answer
Metasploit Framework- What is Perl historically known for in penetration testing?
Show answer
Text processing, pattern matching, and network-based tools- What advantage does Go (Golang) provide for penetration testing tool development?
Show answer
Fast execution speed, minimal dependencies, and easy cross-platform compilation- What is the primary purpose of regular expressions in penetration testing scripts?
Show answer
Pattern matching and extracting specific data from text responses- Define command injection vulnerability
Show answer
A flaw where an attacker can execute arbitrary commands by injecting malicious input into an application- What is SQL injection?
Show answer
An attack where malicious SQL code is inserted into vulnerable input fields to manipulate database queries- Why is automation beneficial for brute force attacks?
Show answer
Scripts can systematically test many credential combinations far faster than manual attempts- What does port scanning automation accomplish?
Show answer
Systematically checks network port ranges to identify open services and listening applications- What is vulnerability scanning automation?
Show answer
Scripts that systematically check systems and applications against known vulnerabilities without manual testing each one- What is payload encoding in penetration testing?
Show answer
Obfuscating malicious payloads to evade security filters and detection systems- Why use multithreading in penetration testing scripts?
Show answer
To run multiple tasks concurrently, significantly speeding up scanning and testing operations- What is the primary purpose of environment variables in automated penetration testing scripts?
Show answer
Storing configuration settings and credentials without hardcoding sensitive data
FlashKeepers