Ethical Hacking Web Application Security 3

Question 1

What is 'HTTP response splitting' in web application security?

Accepted Answer

Injecting CRLF characters into headers to manipulate HTTP responses

Answer

Splitting large HTTP responses for performance

Answer

Intercepting responses with a proxy

Answer

Splitting cookies across multiple requests

Question 2

Which authentication attack uses precomputed hash tables to reverse password hashes?

Accepted Answer

Rainbow table attack

Answer

Brute force attack

Answer

Dictionary attack

Answer

Pass the Hash attack

Question 3

What does SSRF stand for and why is it dangerous?

Accepted Answer

Server-Side Request Forgery — allows attackers to make the server request internal resources

Answer

Secure Socket Response Framework — a security protocol

Answer

Session Storage Request Filter — a defense mechanism

Answer

Static Site Rendering Framework — a CMS feature

Question 4

Which tool is used to test web application security by fuzzing HTTP parameters and headers?

Accepted Answer

Wfuzz

Answer

Aircrack-ng

Answer

John the Ripper

Answer

Responder

Question 5

What is 'HTTP verb tampering' in web security testing?

Accepted Answer

Sending unexpected HTTP methods like PUT or DELETE to bypass access controls

Answer

Modifying server response codes

Answer

Replaying captured HTTP requests

Answer

Injecting headers into HTTP responses

Question 6

Which vulnerability allows an attacker to execute commands on a server through unsanitized input passed to system functions?

Accepted Answer

Remote Code Execution (RCE)

Answer

XSS

Answer

CSRF

Answer

IDOR