Cross Site Request Forgery, Cross Site Scripting and Client Injection Attack GWAPT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the key difference between client-side injection and server-side injection?

   • AClient-side injection targets the browser's DOM or JavaScript environment, while server-side injection targets server-side interpreters or databases.
   • BClient-side injection is always more severe than server-side injection.
   • CClient-side injection only affects the attacker's browser, while server-side injection affects all users.
   • DClient-side injection requires physical access to the victim's computer, while server-side injection does not.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is reviewing a web application that displays user-supplied comments. The analyst discovers that a comment containing <script>alert(document.cookie)</script> is stored and later rendered to all users without any sanitization. Which type of XSS vulnerability is this, and what is the most likely impact?

   • AClient-side injection; the payload modifies the DOM but cannot access cookies
   • BReflected XSS; the attacker can only affect the user who submitted the request
   • CStored XSS; the attacker can execute script in the context of any user who views the comment
   • DDOM-based XSS; the payload executes only in the victim's browser without server involvement
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A penetration tester is analyzing a web application that uses JavaScript to access a global variable named 'config'. The tester finds that an attacker can define a global variable with the same name via a DOM clobbering attack. What is the MOST likely impact of this vulnerability?

   • AThe attacker can bypass the application's Content Security Policy
   • BThe attacker can perform a CSRF attack against the application
   • CThe attacker can steal the session cookie of any user
   • DThe attacker can override the application's configuration and alter its behavior
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does the SameSite cookie attribute help mitigate CSRF attacks?

   • AIt encrypts the cookie so the server can verify its authenticity.
   • BIt prevents the browser from sending the cookie on cross-site requests.
   • CIt makes the cookie accessible only to the server, not to JavaScript.
   • DIt adds a custom header to every request to prove the origin.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In a CSRF attack, why does the server often process the forged request as legitimate?

   • AThe server trusts any request that comes from the victim's IP address.
   • BThe attacker has stolen the victim's session token and uses it to impersonate the victim.
   • CThe attacker has modified the server's authentication logic to accept forged requests.
   • DThe server cannot verify the origin of the request because the browser automatically includes the victim's session cookie.
   Reveal Solution Discussion Select an answer first