Web Application Injection Attacks GCIH Practice Questions (Page 15)

Questions 71–75

1. 71application · medium

   An application authenticates users against an LDAP directory using the following filter: (&(uid=USER)(userPassword=PASS)). A tester submits the username 'admin)(|(uid=*' and a blank password, and the application grants access to the admin account. Which code change would most effectively prevent this LDAP injection while still allowing normal authentication?

   • AEscape LDAP special characters in the username and password before building the filter
   • BUse a regular expression to ensure the username contains only alphanumeric characters
   • CHash the password with SHA-256 before including it in the LDAP filter
   • DUse a separate LDAP query to fetch the user object before verifying the password
   Reveal Solution Discussion Select an answer first
2. 72application · medium

   A C-based network service copies user-supplied data into a fixed-size buffer using strcpy(). A security analyst discovers that sending a specially crafted input longer than the buffer causes the service to crash and occasionally execute attacker-supplied shellcode. Which combination of mitigations would be most effective to prevent exploitation of this vulnerability?

   • AIncrease the buffer size to accommodate the largest expected input
   • BUse a canary value and disable ASLR for performance
   • CReplace strcpy() with strncpy() and enable compiler protections like ASLR and DEP
   • DEnable ASLR and DEP but keep using strcpy()
   Reveal Solution Discussion Select an answer first
4. 73foundation · easy

   What is command injection?

   • AAn attack that injects malicious HTML into a web page.
   • BAn attack that injects malicious SQL into a database query.
   • CAn attack that exploits a buffer overflow to execute arbitrary code.
   • DAn attack where user input is executed as an operating system command by the application.
   Reveal Solution Discussion Select an answer first
5. 74foundation · easy

   Why is proper error handling important in preventing XPath injection?

   • ATo log all XPath queries for auditing.
   • BTo avoid revealing detailed error messages that could help an attacker craft further injections.
   • CTo ensure that the application crashes gracefully.
   • DTo automatically fix the injection vulnerability.
   Reveal Solution Discussion Select an answer first
6. 75foundation · easy

   How does XPath injection typically work?

   • ABy sending a large number of requests to overload the XML parser.
   • BBy exploiting a buffer overflow in the XPath engine.
   • CBy using a UNION query to combine XPath results.
   • DBy injecting expressions like ' or '1'='1 into the XPath query to make conditions always true.
   Reveal Solution Discussion Select an answer first