正解:B
Web server footprinting is part of the reconnaissance phase in ethical hacking. It involves gathering detailed information about a web server's structure, external links, available directories, scripts, and technologies in use.
Techniques include:
Spidering the site to map all accessible URLs and file paths
Identifying hidden directories or backup files
Analyzing page structures and URL patterns
This information helps attackers identify areas to target for further scanning or exploitation.
Incorrect Options:
A). Vulnerability scanning is active testing, not passive footprinting.
C). System-level data is gathered in OS or network footprinting.
D). Brute-force attacks are exploitation techniques, not reconnaissance.
Reference - CEH v13 Official Courseware:
Module 02: Footprinting and Reconnaissance
Section: "Web Server Footprinting Techniques"
Tool Reference: HTTrack, Burp Spider, OWASP ZAP