侵入テスターは Nmap スキャンを実行し、次の出力を取得します。 2023-02-12 18:53 GMT に Nmap 7.80 ( https://nmap.org ) を起動します 10.22.2.2 の Nmap スキャン レポート ホストは稼働しています(レイテンシ 0.0011 秒)。 港湾サービスバージョン 135/tcpopen msrpcMicrosoft Windows RPC 139/tcpopen netbios-ssnMicrosoft Windows netbios-ssn 445/tcpopen microsoft-dsMicrosoft Windows Server 2019 1433/tcpopen ms-sql-sMicrosoft SQL Server 2019 3389/tcpopen ms-wbt-serverMicrosoft Terminal Services 8080/tcpopen httpMicrosoft IIS 9.0 侵入テスターがこのサーバーを調査するために次に試すべきコマンドはどれですか?
正解:A
Given the Nmap scan results showing an open HTTP service on port 8080 running Microsoft IIS 9.0, the next logical step for the penetration tester would be to further explore the web server. Nikto is a web server scanner that can identify known vulnerabilities, configuration issues, and other security problems. Using the command nikto -host http://10.22.2.2 will initiate a scan against the HTTP service on the target server, helping the tester to identify potential weaknesses that could be exploited. References: * Nikto official documentation: Nikto Documentation * Examples of web server vulnerability scanning in penetration testing: Writeup.