Remote Code Execution (RCE) WAHS Practice Questions (Page 10)

Questions 46–46

1. 46foundation · easy

   Which of the following is the most direct example of a command injection attack?

   • ASubmitting `' OR '1'='1` into a login form to bypass authentication.
   • BSubmitting `<script>alert(1)</script>` into a search box that reflects the input in the page.
   • CSubmitting a long string to a buffer that overflows and overwrites memory.
   • DSubmitting `127.0.0.1; cat /etc/passwd` into a ping input field that is passed to a system shell.
   Reveal Solution Discussion Select an answer first