Authentication Bypass WAHS Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   How can a malicious file upload lead to authentication bypass?

   • ABy uploading a file with a .txt extension
   • BBy uploading a large file to consume server storage
   • CBy uploading a file with a long filename
   • DBy uploading a web shell that allows the attacker to execute commands on the server
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A web application allows users to log in from multiple devices. The session management uses a single session token that is updated on every request. An attacker and a victim are both logged into the same account. The attacker notices that after the victim makes a request, the attacker's next request is rejected because the session token has changed. What is the most likely issue and the best way to exploit it?

   • AThe application is using a short session timeout; the attacker should make requests more frequently.
   • BSession token rotation is causing a race condition; the attacker can send requests simultaneously to capture the updated token.
   • CThe application is logging out the attacker due to concurrent sessions; the attacker should use a different browser.
   • DThe application is using session fixation; the attacker should fix the session ID before the victim logs in.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which action is an example of exploiting an IDOR vulnerability?

   • AUsing a brute-force tool to guess passwords
   • BInjecting JavaScript into a comment field
   • CChanging the 'invoice_id' parameter in the URL to view another user's invoice
   • DSending a crafted email to the victim
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   How can privilege escalation occur through forced browsing?

   • ABy enabling JavaScript in the browser
   • BBy using a stronger password
   • CBy accessing an admin page that is not linked but is protected only by obscurity
   • DBy clearing the browser cache
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A company deploys a new web application and forgets to change the default administrator credentials. The default username is 'admin' and the password is 'admin123'. An attacker scans the application, tries these credentials, and gains full administrative access. Which two security controls should have been implemented to prevent this?

   • ARestrict access to the admin panel by IP and use strong passwords
   • BImplement multi-factor authentication and rate limiting
   • CUse a web application firewall (WAF) and intrusion detection system (IDS)
   • DEnforce password change on first login and disable default accounts
   Reveal Solution Discussion Select an answer first