Objective 1.4 Exploit Web-Application Vulnerabilities. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A penetration tester is assessing a customer portal that uses a login form. The application filters single quotes but does not filter double quotes or backslashes. The tester submits the following as the username: admin" OR "1"="1. The login succeeds without a valid password. Which vulnerability did the tester exploit?

   • ACross-site scripting by injecting a JavaScript payload into the username field
   • BCommand injection by breaking out of the SQL query to execute OS commands
   • CSQL injection using a double-quote string delimiter to bypass the single-quote filter
   • DPath traversal by manipulating the username to access the password file
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A web application allows users to upload profile pictures. The application checks the file extension but does not check the file content. A tester uploads a file named avatar.php.jpg that contains PHP code. The file is stored in the web root and can be accessed directly. Which vulnerability is being exploited?

   • ACommand injection because the uploaded file executes OS commands
   • BUnrestricted file upload because the application only checks the extension and allows execution of the uploaded file
   • CCross-Site Scripting because the uploaded file contains JavaScript
   • DPath traversal because the uploaded file is stored outside the web root
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A web application filters requests that contain '../' in the file parameter. The filter is case-sensitive and does not decode URL encoding. A tester wants to access a file outside the web root. Which payload would bypass the filter?

   • A....//....//....//etc/passwd
   • B..%2f..%2f..%2fetc%2fpasswd
   • C..%252f..%252f..%252fetc%252fpasswd
   • D..\..\..\etc\passwd
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which attack exploits insufficient sanitization of file path parameters to access files outside the web root, such as /etc/passwd?

   • AServer-Side Request Forgery (SSRF)
   • BPath Traversal
   • CCross-Site Scripting (XSS)
   • DSQL Injection
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A penetration tester successfully uploads a PHP file to a web server. The file contains code that executes commands passed via a query parameter. The tester accesses the file and runs whoami. Which vulnerability is being exploited?

   • AUnrestricted file upload because the file was uploaded
   • BWeb shell because the uploaded file allows remote command execution
   • CCross-Site Scripting because the file executes JavaScript
   • DCommand injection because the file executes commands
   Reveal Solution Discussion Select an answer first