Which of the following techniques is suitable to attempt this?

A penetration tester is outside of an organization’s network and is attempting to redirect users to a fake password reset website hosted on the penetration tester’s box .

Which of the following techniques is suitable to attempt this?
A . Employ NBNS poisoning.
B . Perform ARP spoofing.
C . Conduct a phishing campaign.
D . Use an SSL downgrade attack.

View Answer

Answer: C