Ethical Thinking Kali Linux Part 8

What is the primary role of HTTP in web applications?

• Encrypts passwords

• Compresses media files

• It enables communication between a client and a web server

• Manages domain names

What does DNS do in the context of web applications?

• Hosts web applications

• Translates domain names into IP addresses

• Detects malware in URLs

• Stores browser cache

What does OWASP stand for?

• Open Web Application Security Project

• Online Web Attack Security Protocol

• Open Web And Secure Ports

• Organization for Web Access Security Practices

Which of the following is NOT part of the OWASP Top 10?

• SQL Injection

• Broken Authentication

• Security Misconfiguration

• Software Piracy

Which vulnerability allows attackers to inject malicious SQL queries?

• Cross-Site Scripting (XSS)

• SQL Injection

• CSRF

• File Inclusion

What is DIRB used for in web application testing?

• To download pages for offline use

• To change DNS records

• To brute-force hidden directories and files on a web server

• To scan for open ports

What is Burp Suite mainly used for?

• Encrypting web servers

• Scanning ports

• Intercepting and analyzing HTTP/S traffic between browser and server

• Creating backup copies of websites

What feature in Burp Suite allows the user to modify HTTP requests in real-time?

• Scanner

• Intercept

• Repeater

• Decoder

What is Nikto designed to do?

• Crack passwords

• Scrape website content

• Scan web servers for vulnerabilities and misconfigurations

• Detect Wi-Fi signals

Why is understanding HTTP methods like GET and POST important in security testing?

• They improve website SEO

• They reduce load times

• They help identify vulnerabilities in user input handling

• They encrypt the traffic