eJPT Web Application Penetration Testing 5

Question 1

During a web application test, you find an input field that passes data to a system command. The input 'test; ls -la' returns a directory listing. What vulnerability is this?

Accepted Answer

Remote Code Execution via Command Injection

Answer

Command Injection occurs when user input is passed unsanitized to a system shell command, allowing attackers to execute arbitrary OS commands using separators like ; or &&.

Question 2

What is the OWASP Top 10 and why is it important for web penetration testers?

Accepted Answer

A regularly updated list of the most critical web application security risks used as a benchmark for testing

Answer

The OWASP Top 10 is a community-maintained document listing the most critical web application security risks, providing penetration testers with a prioritized framework for assessment.

Question 3

What does 'Content Security Policy' (CSP) primarily defend against?

Accepted Answer

XSS by controlling which sources can execute scripts on the page

Answer

CSP is an HTTP response header that tells browsers which content sources are trusted, mitigating XSS by blocking execution of scripts from unauthorized origins.

Question 4

When testing authentication, you notice the application uses Base64-encoded values in a cookie rather than a session ID. Why is this a security concern?

Accepted Answer

Base64 is encoding, not encryption — the data can be trivially decoded to reveal sensitive information

Answer

Base64 is an encoding scheme, not encryption — anyone who intercepts the cookie can decode it instantly, potentially exposing usernames, roles, or other sensitive data.

Question 5

Which of the following best describes a 'time-based blind SQL injection' technique?

Accepted Answer

Using conditional SQL statements that cause the database to pause (SLEEP/WAITFOR) to infer boolean responses

Answer

Time-based blind SQL injection uses functions like SLEEP() or WAITFOR DELAY to cause measurable delays, inferring true/false conditions when no data is returned in the response.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Web Application Penetration Testing 5