Explain web security : What is Reconnaissance?

The video tutorial introduces reconnaissance in ethical hacking, breaking it into three phases: reconnaissance, scanning, and exploitation. It details passive footprinting using public information, active footprinting involving direct interaction, and vulnerability research using databases like NVD and CVE. Tools and techniques such as website mirroring, email analysis, social engineering, and DNS zone transfers are discussed. The video emphasizes the importance of gathering information to identify vulnerabilities and prepare for penetration testing.

What is the primary goal of reconnaissance in ethical hacking?

• To exploit vulnerabilities

• To gather information on targets

• To scan networks

• To develop malware

Which of the following is an example of passive footprinting?

• Dumpster diving

• Social engineering

• DNS zone transfer

• Website mirroring

What tool can be used for website mirroring?

• Nmap

• HTTrack Website Copier

• Wireshark

• Metasploit

Which method involves interacting directly with the target and carries a higher risk of detection?

• Network scanning

• Vulnerability research

• Active footprinting

• Passive footprinting

What is a DNS zone transfer used for in active footprinting?

• To gather public information

• To exploit vulnerabilities

• To scan for open ports

• To obtain network topology details

Which resource is NOT mentioned for vulnerability research?

• Shodan

• CVE Details

• Securiteam

• National Vulnerability Database

What type of information can be found in the National Vulnerability Database?

• Known vulnerabilities of products

• Network configurations

• Malware signatures

• User credentials