eJPT Web Application Penetration Testing 3

Question 1

What is the key difference between Stored XSS and Reflected XSS?

Accepted Answer

Stored XSS persists in the database and executes for every visitor; Reflected XSS only executes for the victim who clicks a crafted link

Answer

Stored XSS saves the malicious payload server-side (e.g., in a database) so it fires for every user who views the infected page, whereas Reflected XSS is delivered via a crafted URL.

Question 2

A web application uses MD5 to hash passwords without a salt. Why is this particularly dangerous?

Accepted Answer

Unsalted MD5 hashes are vulnerable to rainbow table attacks

Answer

Without a salt, identical passwords produce identical MD5 hashes, making them trivially crackable using precomputed rainbow tables.

Question 3

Which tool is commonly used to perform automated SQL injection detection and exploitation during a penetration test?

Accepted Answer

SQLMap

Answer

SQLMap is the industry-standard open-source tool for automated detection and exploitation of SQL injection vulnerabilities.

Question 4

What does CSRF (Cross-Site Request Forgery) primarily exploit?

Accepted Answer

The browser's trust in the authenticated user's session cookies

Answer

CSRF exploits the fact that browsers automatically include session cookies with every request, tricking an authenticated user's browser into making unauthorized requests.

Question 5

When testing for Local File Inclusion (LFI), which file is a classic target on Linux systems to confirm successful exploitation?

Accepted Answer

/etc/passwd

Answer

/etc/passwd is the standard first test for LFI on Linux because it is readable by all users and its content is immediately recognizable.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Web Application Penetration Testing 3