GWAPT Authentication & Session Management

Question 1

Which attack exploits a predictable session token by incrementing or decrementing its value to hijack another user's session?

Accepted Answer

Session token prediction

Answer

Session token prediction relies on weak randomness in token generation, allowing an attacker to guess valid tokens for other users.

Question 2

A web application sets a session cookie without the 'Secure' flag. What is the primary risk?

Accepted Answer

The cookie can be transmitted over unencrypted HTTP connections

Answer

Without the Secure flag, the browser will send the cookie over plaintext HTTP, allowing network attackers to intercept it.

Question 3

During a penetration test you discover that after logging out, the application's session cookie remains valid and can be reused. Which vulnerability does this represent?

Accepted Answer

Improper session invalidation

Answer

Improper session invalidation means the server-side session is not destroyed on logout, letting an attacker reuse a captured token.

Question 4

Which HTTP response header instructs the browser to send the session cookie only when navigating to the originating site, mitigating CSRF?

Accepted Answer

SameSite

Answer

The SameSite cookie attribute restricts cross-site cookie transmission, directly reducing CSRF attack surface.

Question 5

An attacker sends a victim a URL containing a known session ID and waits for the victim to authenticate. What attack is being performed?

Accepted Answer

Session fixation

Answer

Session fixation forces the victim to use an attacker-chosen session ID; once the victim authenticates, the attacker can use that same ID.

(GWAPT) Giac Web Application Penetration Tester Practice Test

(GWAPT) Giac Web Application Penetration Tester Practice Test

GWAPT Authentication & Session Management