Reflected XSS WAHS Practice Questions (Page 8)

Questions 36–37

1. 36application · medium

   A penetration tester is assessing a web application that echoes a 'referrer' parameter in an error message. The tester wants to demonstrate a reflected XSS attack that steals session cookies. Which attack flow is most appropriate?

   • AIntercept the victim's HTTP request and modify the 'referrer' header in transit.
   • BCraft a URL with a malicious script in the 'referrer' parameter, send it to the victim, and capture the cookie when the script executes.
   • CUpload a malicious script to the server's file system and wait for users to access it.
   • DModify the DNS records to redirect the victim to a malicious server that hosts the payload.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a primary defense against reflected XSS?

   • AOutput encoding of user-controlled data before including it in the response.
   • BDisabling JavaScript in the user's browser.
   • CUsing HTTPS to encrypt all traffic.
   • DRestricting the application to internal users only.
   Reveal Solution Discussion Select an answer first