A Gray Hat hacker operates between ethical (White Hat) and unethical (Black Hat) behavior. They might break into systems without permission but without malicious intent, often reporting vulnerabilities afterward.
They perform both offensive and defensive activities.
# Reference - CEH v13 Official Study Guide, Module 1: Introduction to Ethical Hacking
"Gray Hat hackers may violate ethical standards but not necessarily for personal or financial gain. They typically operate without malicious intent."
# Incorrect options:
A). White Hats are ethical hackers.
B). Suicide Hackers attack without regard for being caught.
D). Black Hats are malicious hackers.

The CEH Enumeration module explains that SMTP supports commands such as VRFY, EXPN, and RCPT TO, which can be abused to enumerate valid email users if not properly restricted.
In this scenario, the smtp-enum-users Nmap script successfully uses EXPN and RCPT, indicating that the server responds differently to valid and invalid usernames.
Option C is correct because unrestricted SMTP user verification allows attackers to harvest usernames for further attacks such as phishing or brute force.
Option A involves authentication, not enumeration.
Option B affects confidentiality, not user discovery.
Option D is unrelated to SMTP enumeration.
CEH strongly recommends disabling or restricting these SMTP commands.

CEH v13 outlines a structured approach to vulnerability assessment and exploitation. After identifying a high- severity vulnerability, the next critical step is verification and research, not immediate exploitation. This ensures accuracy, reduces false positives, and avoids unnecessary risk. CEH emphasizes that testers must validate vulnerability details, confirm version applicability, assess exploit availability (e.g., Metasploit, Exploit-DB), and evaluate potential impact. Attempting DoS attacks (Option A) is prohibited unless explicitly scoped and does not align with responsible testing. Brute-force attacks (Option B) are unrelated to software version vulnerabilities. Ignoring the issue (Option D) violates CEH methodology. The correct process is to research and verify-ensuring exploitation is safe, relevant, and authorized. This aligns with CEH's vulnerability management lifecycle: discovery # verification # prioritization # exploitation (when allowed) # reporting.

CEH v13 explains that packet fragmentation is a classic and effective IDS evasion technique. By breaking malicious payloads into smaller fragments, attackers attempt to prevent the IDS from reconstructing the full packet stream correctly, thereby avoiding signature detection.
Many IDS systems rely on packet reassembly and pattern matching. Fragmented packets can confuse or overload the reassembly process, especially if the IDS is poorly configured. CEH v13 specifically lists fragmentation, overlapping fragments, and out-of-order packets as evasion techniques used to bypass network defenses.
Option B describes malware propagation, not IDS evasion. Option C is a social engineering attack, unrelated to IDS detection. Option D is a denial-of-service attempt, not a stealth evasion method.
CEH v13 highlights that defending against fragmentation-based evasion requires proper normalization and reassembly configuration in IDS/IPS systems. Therefore, Option A is the correct answer.

In CEH v13 Module 02: Footprinting and Reconnaissance, the OSINT Framework is introduced as a collection of free, open-source tools and resources to aid ethical hackers in passive reconnaissance.
Key Features of OSINT Framework:
Web-based visual tool that maps out links to open-source intelligence tools.
Allows collection of emails, domains, usernames, IPs, social media data, and more.
Focuses on passive footprinting to avoid detection.
Option Clarification:
A). WebSploit Framework: Used for man-in-the-middle attacks and web vulnerabilities.
B). Browser Exploitation Framework (BeEF): Browser-focused attack tool.
C). OSINT Framework: Correct - open-source intelligence and reconnaissance.
D). SpeedPhish Framework: Phishing simulation tool, not used for passive information gathering.
Reference:
Module 02 - Tools for Footprinting and Reconnaissance
CEH iLabs: Using OSINT Framework for Target Profiling