Common penetration testing tools and their primary use cases tested on the CompTIA PenTest+ exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary use of Nmap?
Show answer
Network scanning and port discovery- What does Metasploit primarily do?
Show answer
Exploitation and payload delivery framework- What is Burp Suite used for?
Show answer
Web application security testing and analysis- What does Wireshark do?
Show answer
Captures and analyzes network traffic packets- What is Aircrack-ng primarily used for?
Show answer
Wireless network penetration testing and WEP/WPA cracking- What does Hashcat do?
Show answer
Cracks password hashes using GPU acceleration- What is John the Ripper used for?
Show answer
Password hash cracking and brute force attacks- What does Hydra do?
Show answer
Performs credential brute force attacks against remote services- What is SQLMap used for?
Show answer
Detecting and exploiting SQL injection vulnerabilities- What does Nikto do?
Show answer
Scans web servers for known vulnerabilities and misconfigurations- What is OpenVAS used for?
Show answer
Vulnerability scanning and threat assessment- What does Nessus do?
Show answer
Performs comprehensive vulnerability scanning and asset assessment- What is TheHarvester used for?
Show answer
Gathering open-source intelligence and email harvesting- What does Shodan search for?
Show answer
Internet-connected devices and their metadata via search queries- What is Maltego used for?
Show answer
Open-source intelligence gathering and data visualization
FlashKeepers