Web Application Attack Techniques and Exploitation EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following tools is commonly used as an intercepting proxy to modify HTTP requests and responses during web application testing?

   • AWireshark
   • BBurp Suite
   • Csqlmap
   • DMetasploit
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which XSS variant occurs entirely within the browser's Document Object Model (DOM) without the server being involved in reflecting the payload?

   • AStored XSS
   • BReflected XSS
   • CDOM-based XSS
   • DHTTP header injection
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A web application has a feature that lets users fetch a URL to import an image. The application runs on a server that also hosts an internal admin panel at http://192.168.1.10/admin. A tester wants to access the admin panel through the vulnerable feature. Which attack is most appropriate?

   • AXSS by injecting a script into the URL parameter.
   • BCSRF by tricking the user into clicking a link.
   • CSSRF by submitting http://192.168.1.10/admin as the URL to fetch.
   • DSQL injection in the URL parameter.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst discovers that a web application reflects user-supplied input in an error message without any sanitization. The analyst suspects a reflected XSS vulnerability. Which of the following is the most effective immediate countermeasure to implement?

   • AUse a Web Application Firewall (WAF) rule to block all requests containing the string 'alert'.
   • BDisable JavaScript in the user's browser to prevent script execution.
   • CApply output encoding on the server side before the input is included in the HTTP response.
   • DAdd a client-side JavaScript validation that blocks any input containing '<script>'.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user reports that after clicking a link in an email, their profile information on a banking website was changed without their knowledge. The website uses cookies for session management and does not require re-authentication for sensitive actions. Which attack most likely occurred, and what is the most effective countermeasure?

   • ASQL injection; use parameterized queries.
   • BReflected XSS; implement Content Security Policy (CSP) headers.
   • CCross-Site Request Forgery (CSRF); implement anti-CSRF tokens in all state-changing forms.
   • DSession fixation; regenerate the session ID after login.
   Reveal Solution Discussion Select an answer first