OSCP Web Application Attacks 2

Question 1

What is the primary goal of directory traversal attacks in web application penetration testing?

Accepted Answer

Accessing files and directories outside the web root by manipulating file path variables

Answer

Directory traversal (path traversal) exploits insufficient input validation to access files outside the intended directory, such as reading /etc/passwd on Linux.

Question 2

What does a 'web shell' provide an attacker after successful web application exploitation?

Accepted Answer

Remote command execution through an HTTP/HTTPS channel

Answer

A web shell is a script uploaded to a compromised web server that provides remote command execution capabilities over HTTP, acting as a backdoor accessible via a browser.

Question 3

During OSCP, you find a web application with an unrestricted file upload. What is the most effective way to exploit this?

Accepted Answer

Upload a malicious web shell script in a language the server executes

Answer

Unrestricted file upload vulnerabilities are best exploited by uploading a web shell (e.g., PHP shell on PHP servers) that can then be accessed to execute commands.

Question 4

What is the difference between reflected and stored Cross-Site Scripting (XSS)?

Accepted Answer

Reflected XSS is returned immediately in a response; stored XSS is saved and executed later for all visitors

Answer

Reflected XSS requires the victim to click a malicious link, while stored XSS persists in the application (e.g., a database) and executes for every user who views the affected page.

Question 5

What Nikto command would you use to scan a web server at 192.168.1.10 on port 8080?

Accepted Answer

nikto -h 192.168.1.10 -p 8080

Answer

The correct Nikto syntax uses -h for the host and -p for the port, so 'nikto -h 192.168.1.10 -p 8080' scans the specified host and port for common vulnerabilities.

OSCP Practice Test

OSCP Practice Test

OSCP Web Application Attacks 2