Authentication Bypass WAHS Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How can an attacker manipulate parameters to bypass authentication?

   • ABy adding a timestamp to the request
   • BBy changing the value of a user ID parameter to another user's ID
   • CBy encrypting the parameter values with a known key
   • DBy deleting all parameters from the request
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A web application returns a JSON response after login that includes a field 'isAdmin': false. A penetration tester intercepts the response, changes it to 'isAdmin': true, and forwards it to the browser. The application then grants the tester administrative privileges. Which vulnerability is being exploited?

   • AResponse manipulation to alter authorization data
   • BClient-side validation bypass
   • CParameter manipulation to change the user role
   • DSession token prediction to impersonate an admin
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is session token prediction?

   • AIntercepting network traffic to capture session tokens
   • BStealing a session token through a cross-site scripting attack
   • CGuessing or calculating a valid session token to impersonate a user
   • DUsing a brute-force attack to guess a user's password
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A web application returns a JSON response after login: {"authenticated": false, "role": "guest"}. The client-side script checks this response and only shows the admin panel if authenticated is true. The server does not re-check the role on subsequent requests. What is the vulnerability?

   • AInsecure Direct Object Reference because the role is in the response.
   • BClient-side authentication bypass because the server trusts the client's response.
   • CHTTP method bypass because the response is sent via POST.
   • DSession token prediction because the JSON contains a role.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary technique used in direct URL access attacks?

   • AUsing a proxy to anonymize the attacker's IP address
   • BSending a large number of requests to overwhelm the server
   • CIntercepting and modifying HTTP headers
   • DGuessing or predicting URLs to access restricted pages directly
   Reveal Solution Discussion Select an answer first