CompTIA PenTest+ (PT0-003) — Question 172

During an engagement, a penetration tester wants to enumerate users from Linux systems by using finger and rwho commands. However, the tester realizes these commands alone will not achieve the desired result. Which of the following is the best tool to use for this task?

Answer options

• A. Nikto
• B. Burp Suite
• C. smbclient
• D. theHarvester

Correct answer: C

Explanation

The correct tool for enumerating users from Linux systems is smbclient, as it allows the tester to interact with SMB shares and retrieve user information. The other options, such as Nikto and Burp Suite, are more focused on web application testing, while theHarvester is used for gathering information from public sources rather than directly querying user accounts on Linux systems.