CompTIA PenTest+ (PT0-002) — Question 88

Which of the following tools should a penetration tester use to crawl a website and build a wordlist using the data recovered to crack the password on the website?

Answer options

• A. DirBuster
• B. CeWL
• C. w3af
• D. Patator

Correct answer: B

Explanation

CeWL is specifically designed to crawl websites and create custom wordlists based on the content it finds, making it ideal for the task of password cracking. DirBuster is more focused on directory brute-forcing, w3af is a web application attack framework, and Patator is a multi-purpose brute-forcer that does not primarily focus on generating wordlists from crawled data.