セキュリティ評価中に、ペネトレーション テスターは次の Python スクリプトを作成することを決定します。 import request x= ['OPTIONS', 'TRACE', 'TEST'l for y in x; z -requests.request(y, 'http://server.net') print(y, z.status_code, z.reason) ペネトレーションテスターが達成しようとしているのは次のうちどれですか? (2 つ選択してください)。
正解:B,D
The Python script mentioned in the question is designed to send HTTP requests using different methods ('OPTIONS', 'TRACE', 'TEST') to a specified URL ('http://server.net') and print out the method used along with the status code and reason for each response. The key objectives of this script are: HTTP Methods Availability (B): By cycling through different HTTP methods, the script checks which methods are supported by the web server. This can reveal potential vulnerabilities, as certain methods like 'TRACE' can be exploited in certain situations (e.g., Cross Site Tracing (XST) attacks). Web Server Fingerprinting (D): The response to different HTTP methods can provide clues about the web server's software and configuration, contributing to server fingerprinting. This information can be used to tailor further attacks or understand the security posture of the server. This script is not designed for causing a denial of service, detecting web application firewalls, examining error handling, or performing banner grabbing directly, which excludes options A, C, E, and F.