Font size
Worksheetscyber security test
Total questions: 22
Worksheet time: 21mins
which tool is used to grab emails of a domain?
hunter.io
subdomain.com
nmap
cruiz
Is blind injection come under XSS
TRUE
FALSE
What rules make an operating system to verify and make strong from incoming packets?
inbound rules
out bound rules
connection security rules
paradigm rules
give command to run feroxbuster using wordlist
url:www.hello.com
wordlist: pink.text
(a)
which tag is used to gain cookies from a server?
<script>alert(document.cookie);</script>
<script>alert("document.cookie");</script>
<script>alert(cookie);</script>
<script>alert(document.cookie;) </script>
give a google dork to find directory transversal for configuration directory which contains user credentials
(a)
There is a tab VOIP in packet sniffing tool what does it do?
used to record calls
used to track the location
used to listen calls
used to track ip address
Is hijacking and hacking refers to same thing?
TRUE
FALSE
Explain in one sentence about the CSRF attack?
Give a linux terminal command to view my ip-address?
(a)
Is authentication and authorization refer to same?
TRUE
FALSE
give types of sql injection?
draw a picture which contains a client is getting a login response from server?
what things we can do with CORS attack?
session theft
unauthorized data theft
database theft
none of the options
what stands for NAT in networking?
network address translation
network address transpose
network analyze
tool
network and
transportation
While capturing the network in the wireshark tool. I want to see packets of a 192.0.2.162 what filter i should use?
(a)
What security vulnerability allows attackers to execute arbitrary system commands by injecting malicious inputs into a web application's command-line interface?
Cross-Site Scripting (XSS)
SQL Injection
Cross-Site Request Forgery (CSRF)
Command Injection
What is the correct syntax for a payload in an XXE (XML External Entity) Injection attack?
<!ENTITY xxe SYSTEM "file:///etc/passwd">
<?xml version="1.0" encoding="UTF-8"?>
SELECT * FROM Users WHERE username='admin' AND password='xxe'
<script>alert('XXE Attack');</script>
What type of vulnerabilities focus on exploiting flaws or weaknesses in the logic and workflow of an application rather than traditional security mechanisms?
SQL Injection
Cross-Site Scripting (XSS)
Business Logic Vulnerabilities
Cross-Site Request Forgery (CSRF)
Buffer Overflow
To install a linux OS in vm-ware what might be the extension of the kali OS image file?
(a)
What is the primary purpose of a firewall in network security?
To prevent unauthorized access to or from a private network
To encrypt all data transmitted over the network
To block all incoming and outgoing traffic
To monitor network performance
give a command to find databases in hey.com?
(a)
