Session Hijacking Techniques EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following session ID characteristics makes it most vulnerable to prediction attacks?

   • AA session ID that is transmitted over HTTPS
   • BA session ID that expires after a short time
   • CA short, sequential session ID
   • DA long, random session ID
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A penetration tester is attempting to hijack a session in a web application. The tester has identified a stored XSS vulnerability and also notices that the application uses HTTP for some pages. Which attack sequence would be most effective?

   • ASniff the network traffic to capture the session cookie, then use it to impersonate the victim.
   • BInject an XSS payload that sends the victim's cookies to the tester's server, then use the captured cookie to impersonate the victim.
   • CFix the session ID by sending a crafted link, then wait for the victim to log in.
   • DPredict the session ID by analyzing the cookie value, then use it to impersonate the victim.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is investigating a session hijacking incident. The attacker first sniffed the victim's session cookie over an unencrypted Wi-Fi network, then used that cookie to impersonate the victim. Which sequence best describes the steps the attacker took?

   • AFixate the session ID, then wait for the victim to log in
   • BGuess the session ID, then inject a script to steal the cookie
   • CUse a man-in-the-browser to modify the session cookie
   • DSniff the network, capture the session token, and replay it to the server
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A developer is writing a web application and wants to mitigate session hijacking via XSS. The application already uses HTTPS and sets the HttpOnly attribute on the session cookie. Which additional measure would most effectively prevent an attacker from using XSS to steal the session cookie?

   • AUse a longer session ID to make it harder to guess.
   • BSet the Secure attribute on the session cookie.
   • CSanitize all user input and encode output to prevent XSS injection.
   • DUse a shorter session timeout to limit the window of attack.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A web application has a stored XSS vulnerability in a comment field. The application uses HTTPS and sets the HttpOnly attribute on the session cookie. An attacker wants to hijack a victim's session. Which technique would be most effective despite the HttpOnly attribute?

   • AUse XSS to perform actions on behalf of the victim, such as changing the account email or password.
   • BUse XSS to redirect the victim to an attacker-controlled page that captures the cookie.
   • CUse XSS to force the victim to log out and then log in again with a known session ID.
   • DUse XSS to read the session cookie via document.cookie.
   Reveal Solution Discussion Select an answer first