OSCP Web Application Attacks 2

Question 1

Which vulnerability occurs when user-supplied input is reflected in a web page without proper sanitization and executes in a victim's browser?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

XSS allows attackers to inject malicious scripts into web pages viewed by other users, potentially stealing cookies or performing actions on their behalf.

Question 2

When exploiting a Remote File Inclusion (RFI) vulnerability, what does the attacker typically host on their server?

Accepted Answer

A malicious PHP web shell

Answer

In RFI attacks, the attacker hosts a malicious script (commonly a PHP web shell) on their server, which the vulnerable application fetches and executes.

Question 3

What does the '--os-shell' flag in SQLmap attempt to do?

Accepted Answer

Obtain an interactive OS shell via SQL injection

Answer

SQLmap's --os-shell flag attempts to leverage SQL injection to achieve command execution and provide the attacker with an interactive operating system shell.

Question 4

Which file extension is most commonly associated with a web shell uploaded during a PHP application attack?

Accepted Answer

.php

Answer

PHP web shells use the .php extension so the web server interprets and executes the malicious code when the file is accessed via a browser or HTTP request.

Question 5

What type of attack involves tricking a victim into sending authenticated requests to a vulnerable web application without their knowledge?

Accepted Answer

CSRF

Answer

Cross-Site Request Forgery (CSRF) forges authenticated requests from a victim's browser to perform unintended actions on a web application where they are logged in.

OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

OSCP Web Application Attacks 2