Using AI for Web Exploitation GOAA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   What is a common AI-based approach to evade intrusion detection systems (IDS) that rely on signature matching?

   • ASlowing down the attack to avoid triggering rate-based alerts
   • BUsing a VPN to hide the source IP address
   • CSending the payload in small fragments to confuse the IDS
   • DUsing generative models to create polymorphic payloads that change their signature each time
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   An AI tool is generating payloads for a web application that uses a custom input validation library. The library strips certain characters and encodes others. The AI tool has access to the library's source code. The tester needs a payload that will execute JavaScript in the browser. The payload must also evade a WAF that blocks common XSS patterns. Which approach is most likely to succeed?

   • AGenerate a payload that uses only event handlers without any special characters, assuming the library does not filter them.
   • BUse a payload that is encoded multiple times to bypass the library, without testing it.
   • CUse a standard XSS payload like <script>alert(1)</script> and rely on the WAF to not block it.
   • DUse the AI model to analyze the library's sanitization logic and generate a payload that leverages allowed characters and encoding to form an executable JavaScript context, then test it in a browser.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A penetration tester is using an AI tool to generate a payload for a blind SQL injection vulnerability. The application is slow and returns the same response for both true and false conditions, making boolean-based blind injection difficult. The tester wants to extract data efficiently. Which technique is most appropriate?

   • AUse a time-based blind injection payload that introduces a delay when a condition is true, and measure the response time to infer data.
   • BUse a UNION-based injection payload to retrieve data directly in the response.
   • CUse a boolean-based blind injection payload and rely on subtle differences in response headers.
   • DUse an error-based injection payload to force the database to output data in error messages.
   Reveal Solution Discussion Select an answer first
5. 19foundation · medium

   Which statement best describes how AI tools can assist in the discovery of web application vulnerabilities?

   • ABy directly exploiting vulnerabilities without any human oversight
   • BBy guaranteeing the identification of all vulnerabilities in an application
   • CBy replacing the need for manual penetration testing entirely
   • DBy automatically analyzing application source code and traffic patterns to identify potential weaknesses
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A red team is using an AI-driven exploitation framework to automate the discovery and exploitation of vulnerabilities in a web application. After the initial scan, the framework identifies several potential injection points and automatically attempts to exploit them. The team wants to ensure that the exploitation phase is both effective and safe. Which action should the team take?

   • AConfigure the framework to pause after each successful exploitation and require human confirmation before proceeding to the next target.
   • BDisable logging during the exploitation phase to reduce the amount of data the team needs to review.
   • CUse the framework's default payload set without customization to avoid introducing errors.
   • DSet the framework to automatically exploit all identified injection points without interruption to maximize efficiency.
   Reveal Solution Discussion Select an answer first