NEW
Font size
WorksheetsWeb Application Post-Test Under Cyber Closet Project
Total questions: 25
Worksheet time: 19mins
Which of the following should be stored in the cookie?
Session ID
Account Privileges
User Name
Password
In which of the following exploits does an attacker insert malicious code into a link that appears to be from a trustworthy source?
Cross-Site Scripting
Buffer over flows
Command injection
Path traversal attack
Which languages are vulnerable to Cross Site Scripting attacks?
Java
ASP.Net
Perl
All of the above
Which can be considered as a possible solution for SQL injection vulnerability?
Data Validation
Secure Cookies
Encryption
Comprehensive exception handling
___________ is a special form of attack using which hackers’ exploit – human psychology.
Cross Site Scripting
Insecure network
Social Engineering
Reverse Engineering
Which of the following is not an example of social engineering?
Dumpster diving
Shoulder surfing
Carding
Spear phishing
Which of the following is a program capable of continually replicating with little or no user intervention?
Virus
Trojan horses
Rootkit
Worms
Point out the correct statement.
Parameterized data cannot be manipulated by a skilled and determined attacker
Procedure that constructs SQL statements should be reviewed for injection vulnerabilities
The primary form of SQL injection consists of indirect insertion of code
None of the mentioned
Which of this is an example of physical hacking?
Remote Unauthorised access
Inserting malware loaded USB to a system
SQL Injection on SQL vulnerable site
DDoS (Distributed Denial of Service) attack
_________ framework made cracking of vulnerabilities easy like point and click.
.Net
Metasploit
Zeus
Ettercap
Wireshark is a ____________ tool.
Network protocol analysis
Network connection security
Connection analysis
Defending malicious packet-filtering
What are Sysinternal Tools?
Troubleshooting Utilities
Advanced Task Manager Tools
Anti-virus tools
Advanced System Care
Which of the following Burp suite tools is used for web application mapping?
Spider
Scanner
Both (1) and (2)
None of the above
Proxy
___________ is a weakness that can be exploited by attackers.
System with Virus
System without firewall
System with vulnerabilities
System with a strong password
A/An __________ is a piece of software or a segment of command that usually take advantage of a bug to cause unintended actions and behaviors.
Malware
Trojan
Worms
Exploit
Which tool is able to convert .jpg and .doc file into a malicious file for the attacker?
Msfvenom
Metasploit
Fake Image Exploiter
All of the Above
A _________ is a software bug that attackers can take advantage to gain unauthorized access in a system.
System error
Bugged system
Security bug
System virus
Which tool has multiple options for social engineering attack for the hacker?
SEtoolkit
HTTrack
Homoglyph
All of the Above
Security Misconfiguration occurs when?
The device has a software vulnerability
The device has no firewall in it
The software used in the device is outdated
The device default passwords have not been changed
What is the Query to find the vulnerable website for SQL injection?
Inurl: product.php?id
Inurl: index.php?c
Inurl: product.php?id=4
Inurl: login.php
What is the role of 'Do intercept' action command for HTTP messages?
This command is responsible for the interception of the request.
These command allows to quickly add an interception rule to prevent future interception of messages.
It displays the HTTP status code of the current request.
Both (1) and (2)
Both (1) and (3)
What is the role of Burp suite proxy in handing request in web application?
The Burp suite proxy manages the configuration of the application.
The Burp suite use 8080 port by default for handling web apps.
The user need to log into the Burp Suite for the responses and requests that pass through each of the proxies.
All of the above
Both (1) and (3)
Which of the following is/are correct about Burp suite walkthrough step in web application?
It is used to test the web application.
It is used to intercepting and modification of the request.
It is used to check the session token management for the users.
All of the above
Both (1) and (3)
What are the tasks related to Burp Proxy for intercepting and manipulating the request?
Intercept and modify all HTTP/S traffic passing in both directions.
This tool manages the content and serialization of request.
Burp proxy is used to test manually the requests and responses.
It is used to modify the requests automatically.
All of the above
In the practical for web server attack which port was targeted?
21
22
80
443
