Manipulating Network Traffic GMOB Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A tester is using a proxy to intercept traffic from a mobile app. The app uses certificate pinning and the tester has a rooted device. The tester wants to bypass pinning without modifying the app's APK. Which technique is most effective?

   • AUse a DNS rebinding attack to redirect the app's traffic to a local server.
   • BInstall the proxy's CA certificate in the system trust store and configure the proxy.
   • CUse a VPN-based packet capture app that does not require a proxy.
   • DUse an Xposed module like 'JustTrustMe' to disable certificate validation globally.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An analyst is testing a mobile app for session fixation vulnerabilities. The analyst notices that the app accepts a session ID provided in the login request. Which test should the analyst perform?

   • ALog in with valid credentials and then change the session ID in subsequent requests.
   • BSet a known session ID before login, then log in and check if the server uses that same session ID after authentication.
   • CReplay the login request multiple times to test for replay attacks.
   • DDelete the session cookie and observe if the app creates a new one.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An analyst is configuring a proxy for a mobile app that uses WebSocket connections. The analyst wants to intercept and modify WebSocket messages. Which proxy feature is required?

   • ASSL/TLS interception with a trusted CA certificate.
   • BA VPN mode to capture all traffic.
   • CHTTP/2 support.
   • DSupport for WebSocket interception and message modification.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A mobile app analyst needs to capture all network traffic from a non-rooted Android device, including traffic from other apps on the device, to analyze data flows. The analyst has a laptop with a Wi-Fi adapter that supports monitor mode. Which setup should the analyst use?

   • AConfigure the device to use a proxy on the laptop and capture with Burp Suite.
   • BUse adb to run tcpdump on the device.
   • CInstall a VPN app on the device that logs all traffic.
   • DSet up a rogue access point on the laptop and configure the device to connect to it, then capture traffic with Wireshark.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An analyst is fuzzing a mobile app's API that uses a JSON-based protocol. The analyst has captured a legitimate request and wants to fuzz the 'id' field. The API is known to be sensitive to malformed JSON. Which fuzzing strategy is most likely to uncover a parser vulnerability?

   • ASend mutations that include invalid JSON types, such as arrays, objects, and null, in the 'id' field.
   • BSend the request with a very large integer value in the 'id' field.
   • CSend the request with a valid 'id' but change the HTTP method.
   • DSend the same request with the 'id' field omitted.
   Reveal Solution Discussion Select an answer first