CEH Introduction to Ethical Hacking Practice Question

Passive reconnaissance

Passive reconnaissance is the process of gathering information about a target system or network without directly interacting with it, using publicly available sources and stealthy observation.

OSINT Techniques

OSINT techniques are methods used to collect information from publicly available sources for security assessments or investigations.

Zero Day Vulnerabilities

A zero day vulnerability is a security flaw in software or hardware that the vendor does not yet know about and has not fixed, making it extremely dangerous because attackers can exploit it before a patch exists.

Steganography

Steganography is the practice of hiding a secret message inside an ordinary, non-secret file such as an image, audio, or video to keep the message hidden from casual observers.

Session Hijacking

Session hijacking is an attack where a cybercriminal steals or takes over a user's active session with a web application, allowing the attacker to pretend to be that user without needing their password.

Exploit Databases

An exploit database is a curated collection of known software vulnerabilities, proof-of-concept exploit code, and security research findings used by ethical hackers and security professionals to test and defend systems.