PenTest+ Web Application Security Testing 2

Question 1

A tester accesses `/api/users/1001` and then changes the ID to `/api/users/1002` to view another user's data without authorization. What vulnerability is this?

Accepted Answer

Insecure Direct Object Reference (IDOR)

Answer

Insecure Direct Object Reference (IDOR) occurs when an application exposes internal implementation objects (like user IDs) without proper authorization checks, allowing access to other users' data.

Question 2

Which vulnerability is exploited when an attacker injects an external entity into an XML document to read local files from the server?

Accepted Answer

XXE Injection

Answer

XML External Entity (XXE) Injection exploits weakly configured XML parsers to process external entity declarations, which can allow file disclosure, SSRF, or denial of service.

Question 3

An attacker manipulates a URL parameter so the web server makes HTTP requests to internal network resources. What is this attack called?

Accepted Answer

Server-Side Request Forgery (SSRF)

Answer

Server-Side Request Forgery (SSRF) forces the server to make requests to internal or external resources, potentially exposing internal services not directly accessible to the attacker.

Question 4

A web form accepts filenames and passes them directly to a shell command. Which attack allows an attacker to run arbitrary OS commands?

Accepted Answer

OS Command Injection

Answer

OS Command Injection occurs when user-supplied input is incorporated into shell commands without proper sanitization, allowing attackers to execute arbitrary operating system commands.

Question 5

A PHP application includes files based on a `page` parameter: `include($_GET['page'] . '.php')`. How could a tester exploit Local File Inclusion (LFI)?

Accepted Answer

Using path traversal sequences like `../../../etc/passwd%00`

Answer

By using path traversal sequences and a null byte to truncate the .php extension, a tester can include arbitrary files from the server's filesystem via the LFI vulnerability.

(PenTest+) CompTIA PenTest+ Certification Practice Test

(PenTest+) CompTIA PenTest+ Certification Practice Test

PenTest+ Web Application Security Testing 2