Broken Access control II

Vulnerabilities associated with Broken Access Control:

[Multiple Choice]

• Forced Browsing

• IDOR

• LFI

• All of the above

$file = $_GET['file'];

include('directory/' . $file);

This PHP code can lead to:

• XXE

• Local File Inclusion

• Insecure Direct Object Reference

• Cross-site scripting

The secure file permission(s) are:

• -rws---r-x root root

• -rwx------ root root

• drwxr-x-w- root root

• -r-xr-xr-x root root

Forced Browsing is:

• Forcing the application to upload malicious file

• Remote code execution in the webserver

• enumerate and access resources that are not referenced by the application, but are still accessible

• None of these

What threat are you vulnerable to if you do not validate authorization of user for direct references to restricted resources?

• Cross site scripting

• Cross Site Request Forgery

• SQL Injection

• Insecure Direct Object References

Which of the following are effective ways to implement access control?

[Multiple Choice]

• Implementing Access Control Matrix for application resources

• Using hidden form fields to authorize

• Logging unauthorized users actions

• Enforcing RWX permission for every files on server for everyone

Taking control of Admin functionality and Misusing sensitive data that they are unauthorized to access is:

• Xml Enternal Entities Injection

• SQL Injection

• Cross site scripting

• Broken Access Control

User selects item -> summary page -> Payment

Which of the following can be business logic flaw in above business flow:

• Denial of service of Payment gateway

• Including local files

• Able to go back to summary page with same session and lower the total price.

• None of the above

Parameter Temepering of GET parameters can be mitigated using

• Using HTTPS instead of HTTP

• Randomizing GET parameters

• Client Side Input Validation

• All of the above

<button type="button" disabled href="admin.jsp">Admin</button>

The above button is available to non-admin user.

• This is secure method to implement Access Control

• It could be bypassed by editing HTML code at client side.

• "admin.jsp" cannot be accessed by non admin user

• All of the above