OSCP Web Application Attacks

Question 1

Which SQL injection technique retrieves data by asking the database true/false questions when no output is directly visible?

Accepted Answer

Boolean-based blind injection

Answer

Boolean-based blind SQLi infers data by sending queries that return different responses based on true/false conditions, without requiring visible output.

Question 2

What does the SLEEP() function in a SQL injection payload help an attacker determine?

Accepted Answer

Whether the injection point exists via time delay

Answer

SLEEP() is used in time-based blind SQLi to confirm a vulnerable injection point by causing a measurable delay in the server's response.

Question 3

Which tool is commonly used in OSCP labs to automate SQL injection discovery and exploitation?

Accepted Answer

SQLmap

Answer

SQLmap is an open-source tool that automates detection and exploitation of SQL injection flaws, widely used during OSCP penetration tests.

Question 4

In a Local File Inclusion (LFI) vulnerability, which of the following payloads is used to traverse directories and read /etc/passwd?

Accepted Answer

../../../etc/passwd

Answer

Path traversal sequences (../) are used in LFI to navigate up the directory tree and access files outside the web root such as /etc/passwd.

Question 5

Which HTTP method is most commonly exploited to upload a malicious web shell to a vulnerable web server?

Accepted Answer

PUT

Answer

The HTTP PUT method allows clients to upload files to a server; if misconfigured, attackers can upload a web shell granting remote code execution.

OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

OSCP Web Application Attacks