CompTIA PenTest+ Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the CompTIA PenTest+ Exam with flashcards and multiple choice questions. Each question offers hints and detailed explanations, empowering you for success!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

Which tool is generally NOT used for web application attacks?

BeEF
Nikto
Wireshark
SQLMap

The correct answer is: Wireshark

Wireshark is a network protocol analyzer primarily used for capturing and inspecting data packets traveling over a network. While it is an essential tool for network analysis and troubleshooting, its primary focus is not on web application attacks. It allows security professionals to monitor and analyze traffic but does not specifically target web applications or exploit vulnerabilities within them. In contrast, BeEF (Browser Exploitation Framework) focuses on exploiting vulnerabilities within web browsers, making it relevant for web application attacks. Nikto is a web server scanner that tests for various vulnerabilities on web servers, thus directly aimed at web applications. SQLMap is a specialized tool for automating the process of detecting and exploiting SQL injection vulnerabilities in web applications, making it highly relevant for web application security testing. Therefore, Wireshark stands out as the tool not typically associated with direct web application attacks.