WorksheetsVAPT
Total questions: 50
Worksheet time: 8mins
Which of the following best describes a client-side vulnerability?
Flaw in server configuration
Weakness in user-side applications like browsers or plugins
Misconfigured firewall rules
Database injection flaw
Cross-Site Scripting (XSS) is primarily a type of:
Server-side vulnerability
Client-side vulnerability
Network-level vulnerability
Authentication issue
Which client-side technology is most often targeted for injection attacks?
HTML
CSS
JavaScript
XML
Drive-by download attacks occur when:
A user downloads a file intentionally
Malware is automatically downloaded when visiting a webpage
A firewall is disabled by the user
A web server hosts malicious files
Which of the following is a major cause of client-side vulnerabilities?
Outdated software and plugins
Strong encryption algorithms
Sandboxing browsers
Code signing verification
What is the main role of a browser sandbox?
To improve page rendering
To isolate browser processes and reduce exploit impact
To store cookies securely
To manage browser extensions
Which of the following can exploit client-side vulnerabilities?
Email attachments
Malicious web pages
Infected USB drives
All of the above
The Document Object Model (DOM) is often manipulated during which type of attack?
SQL Injection
DOM-based XSS
CSRF
Directory Traversal
The best defense against client-side vulnerabilities includes:
Frequent OS reinstalls
Regular patching and sandboxing
Removing antivirus
Using outdated browsers
Which protocol is commonly exploited in client-side attacks?
FTP
HTTP
DNS
SSH
Which Internet Explorer feature helps isolate web content from system resources?
Protected Mode
Compatibility View
ActiveX Control
SmartScreen Filter
What is the purpose of the SmartScreen Filter in Internet Explorer?
To speed up browsing
To block malicious websites and downloads
To manage cookies
To display cached pages
Which scripting language is most often exploited in Internet Explorer vulnerabilities?
Python
VBScript
C#
Ruby
ActiveX controls are primarily used for:
Executing scripts in the browser
Managing system registry
Rendering HTML
Providing interactive web functionality
Which Internet Explorer zone has the lowest trust level by default?
Local Intranet Zone
Trusted Sites Zone
Restricted Sites Zone
Internet Zone
Which feature was introduced to limit script-based attacks in IE?
Content Security Policy
NoScript Filter
Enhanced Protected Mode
Memory Heap Compression
Which of the following is a common vector for IE-based attacks?
PDF documents
ActiveX and JavaScript
JSON files
REST APIs
Internet Explorer’s Protected Mode runs under which privilege level?
Administrator
Medium integrity
Low integrity
High integrity
The first major browser-based exploit involved which component?
Java applets
ActiveX controls
Flash Player
The “Aurora” attack exploited which browser?
Firefox
Chrome
Internet Explorer
Safari
Heap spraying techniques became popular during which era of attacks?
1990s
Early 2000s
Late 2000s
2010s
The rise of client-side exploits coincided with:
Growth of web applications and scripting
Server hardening
Decrease in malware
Static page hosting
Which file format became a frequent target for client-side exploits?
TXT
JPG
MP3
Which organization maintains vulnerability databases like CVE that track client-side exploits?
IEEE
MITRE
ICANN
OWASP
Modern browsers mitigate many client-side attacks through:
ASLR and DEP
Firewall rules
IDS signatures
File hashing
A recent trend in client-side exploitation involves:
Supply chain browser extensions
SQL injection
FTP bounce attacks
ARP spoofing
Fuzzing a browser helps identify:
Logical application errors
Input validation vulnerabilities
Buffer overflows and memory corruption
Password leaks
Heap spraying is used to:
Reduce CPU load
Fill memory with malicious shellcode
Encrypt data in the heap
Patch vulnerabilities
Which scripting environment is often used for heap spraying?
Python
VBScript or JavaScript
Bash
PowerShell
In heap spraying, the main goal is to:
Increase heap size
Predict memory layout for exploit control
Randomize heap allocation
Clean unused memory
Which protection mechanism directly interferes with heap spray reliability?
ASLR
IDS
Firewalls
VPN
What type of vulnerability is most often exploited with heap spraying?
Integer overflow
Use-after-free
Race condition
Cross-site scripting
Modern browsers counter heap spraying using:
Heap randomization and sandboxing
Stack compression
Cache encryption
DNS blocking
Manual code auditing for browser-based vulnerabilities focuses on:
JavaScript memory handling
Network packets
Firewall logs
TLS certificates
Which security header helps mitigate XSS attacks?
Content-Security-Policy (CSP)
Strict-Transport-Security (HSTS)
Cache-Control
X-Frame-Options
Keeping browsers updated primarily protects against:
Denial-of-service attacks
Zero-day vulnerabilities
Memory leaks
File corruption
The use of sandboxed iframes in HTML5 prevents:
Server crashes
Client-side code execution outside its context
SQL injection
DNS spoofing
One effective way to prevent drive-by downloads is:
Disable JavaScript
Use ad blockers and anti-exploit toolkits
Clear cache daily
Use cache only
Digital code signing ensures:
The identity and integrity of downloaded executables
Heap layout protection
Heap compression
HTML validation
User education is important because:
Patching is not needed
Many client-side exploits rely on social engineering
Antivirus tools are unreliable
Browsers are inherently secure
The first step in malware analysis is:
Dynamic debugging
Safe collection and isolation of samples
Network scanning
Signature comparison
A Honeynet is:
A production network
A decoy network used to attract and analyze attackers
A DNS filtering system
A secure private network
The main purpose of Honeynets is to:
Patch systems automatically
Monitor and capture malicious behavior
Protect endpoints directly
Serve legitimate traffic
Which of the following tools is often used for static malware analysis?
IDA Pro
Wireshark
Nmap
Nessus
Initial malware analysis focuses on:
Code execution
File metadata and basic behavior
Decrypting payload
System call tracing
Honeynet data is used to:
Track attacker TTPs and trends
Replace antivirus definitions
Patch vulnerabilities directly
Encrypt malicious data
A honeypot is different from a honeynet because:
It contains only one system
It is used in production
It is hardware-only
It cannot log activity
Dynamic malware analysis involves:
Disassembling code
Executing malware in sandboxed environments
Manual inspection of binary headers
CRC checks
Which of the following is a common malware evasion technique?
Code obfuscation
Open-source licensing
Port forwarding
Static linking
Honeynet technologies like Sebek are used for:
Capturing system-level attacker activity
Encrypting network traffic
Blocking malware downloads
Sandboxing browsers
