Ethical Hacking Web Application Security 2

Question 1

Which tool is commonly used by penetration testers for automated SQL injection detection and exploitation?

Accepted Answer

SQLMap

Answer

Nikto

Answer

Hydra

Answer

Dirb

Question 2

What is 'clickjacking' in web application security?

Accepted Answer

Embedding a target page in an iframe to trick users into clicking hidden elements

Answer

Stealing clicks via malicious advertisements

Answer

Intercepting click events with JavaScript

Answer

Brute forcing login buttons

Question 3

Which type of XSS permanently stores malicious script in the target server's database?

Accepted Answer

Stored XSS

Answer

Reflected XSS

Answer

DOM-based XSS

Answer

Blind XSS

Question 4

What does IDOR stand for in web security testing?

Accepted Answer

Insecure Direct Object Reference

Answer

Insecure Data Object Reference

Answer

Indirect Data Object Retrieval

Answer

Internal Directory Object Redirect

Question 5

Which tool is used to brute force hidden directories and files on a web server?

Accepted Answer

Gobuster

Answer

Sqlmap

Answer

Wireshark

Answer

Metasploit

Question 6

What is an 'open redirect' vulnerability?

Accepted Answer

An application that redirects users to attacker-controlled URLs via unvalidated parameters

Answer

A server that allows unrestricted outbound connections

Answer

An FTP server with anonymous login enabled

Answer

A misconfigured CORS policy