PenTest+ Web Application Security Testing

Question 1

During a web application pentest, you discover that user input is reflected in an HTML page without sanitization. Which attack type should you attempt first?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

SQL Injection

Answer

Command Injection

Answer

XML External Entity (XXE)

Question 2

A tester submits the payload `' OR '1'='1` into a login form and gains unauthorized access. What vulnerability has been exploited?

Accepted Answer

SQL Injection

Answer

Broken Authentication

Answer

LDAP Injection

Answer

XPATH Injection

Question 3

Which OWASP Top 10 category describes a flaw where an application uses components with known security weaknesses such as outdated libraries?

Accepted Answer

Vulnerable and Outdated Components

Answer

Security Misconfiguration

Answer

Injection

Answer

Broken Access Control

Question 4

A web application accepts a URL parameter to redirect users after login. An attacker crafts a link that redirects victims to a malicious site. What vulnerability is this?

Accepted Answer

Open Redirect

Answer

Cross-Site Request Forgery (CSRF)

Answer

Clickjacking

Answer

Server-Side Request Forgery (SSRF)

Question 5

Which Burp Suite feature is most useful for intercepting and modifying HTTP requests between a browser and a web server during a pentest?

Accepted Answer

Proxy

Answer

Scanner

Answer

Repeater

Answer

Intruder

Question 6

During directory traversal testing, which payload would most likely help access /etc/passwd on a Linux web server?

Accepted Answer

../../../etc/passwd

Answer

%00../etc/passwd

Answer

..\..\windows\system32

Answer

SELECT * FROM passwd

Question 7

What is the primary purpose of testing for Cross-Site Request Forgery (CSRF) vulnerabilities in a web application?

Accepted Answer

To force authenticated users to unknowingly submit requests

Answer

To inject malicious scripts into web pages viewed by other users

Answer

To bypass server-side input validation

Answer

To extract sensitive data from server databases