Directory Browsing and Bruteforcing WAHS Practice Questions (Page 4)

Questions 16–20

1. 16application · easy

   A security consultant is reviewing a web server configuration and notices that directory listing is enabled for the /downloads/ directory. The directory contains product manuals and software installers. The organization wants to keep the files accessible but prevent users from seeing the full list of files. Which recommendation is most appropriate?

   • AMove the files to a different directory
   • BAdd a password to the /downloads/ directory
   • CDisable directory listing for the /downloads/ directory
   • DRename the files to random strings
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is using a brute force tool to discover hidden directories on a web server. The tool sends requests for common directory names and records the response sizes. The tester notices that /admin returns a response size of 5000 bytes, /backup returns 5000 bytes, and /nonexistent returns 5000 bytes. What is the most likely explanation for these results?

   • AAll three directories exist and have the same content
   • BThe tool is malfunctioning and not sending requests correctly
   • CThe server is rate limiting the requests and returning the same response
   • DThe server returns a custom 404 page for all non-existent paths, making response size an unreliable indicator
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A penetration tester has found a directory listing on a web server that reveals a file named 'backup_2023.zip'. The tester wants to determine if there are other backup files with similar names. Which technique is most efficient to discover these files?

   • AUse a tool like dirb or gobuster with a wordlist that includes backup-related filenames.
   • BCheck the web server logs for previous requests to backup files.
   • CUse a search engine to find indexed backup files on the domain.
   • DManually try common backup names like 'backup_2022.zip' and 'backup_2021.zip'.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which tool is commonly used to brute force directories and files on a web server by using a wordlist?

   • ANmap
   • BGobuster
   • CMetasploit
   • DWireshark
   Reveal Solution Discussion Select an answer first
6. 20application · easy

   A security analyst is evaluating the risk of a brute force attack on a web application's admin login page. The application currently has no rate limiting or account lockout. The analyst needs to explain the most likely impact of this vulnerability. Which statement is most accurate?

   • AAn attacker can automate password guessing until the admin credentials are discovered
   • BAn attacker can cause a denial of service by overwhelming the login page
   • CAn attacker can intercept the admin's password as it is transmitted
   • DAn attacker can inject malicious code into the login page to steal credentials
   Reveal Solution Discussion Select an answer first