CompTIA PenTest+ PT0-001 Cert Guide

Chapter 3

Information Gathering and Vulnerability Identification

This chapter covers the following subjects:

• Information Gathering and Vulnerability Identification

• Understanding Information Gathering and Reconnaissance

• Understanding the Art of Performing Vulnerability Scans

• Understanding How to Analyze Vulnerability Scan Results

The first step a threat actor takes when planning an attack is to gather information about the target. This act of information gathering is known as reconnaissance. Attackers use scanning and enumeration tools along with public information available on the Internet to build a dossier about a target. As you can imagine, as a penetration tester, you must also replicate these methods to determine the exposure of the ...