200-201 · Question #104
Refer to the exhibit. Which kind of attack method is depicted in this string?
The correct answer is A. cross-site scripting. The depicted string, which likely contains embedded script tags within user input, represents a Cross-Site Scripting (XSS) attack.
Question
Refer to the exhibit. Which kind of attack method is depicted in this string?
Options
- Across-site scripting
- Bman-in-the-middle
- CSQL injection
- Ddenial of service
How the community answered
(37 responses)- A89% (33)
- B3% (1)
- C3% (1)
- D5% (2)
Why each option
The depicted string, which likely contains embedded script tags within user input, represents a Cross-Site Scripting (XSS) attack.
Cross-Site Scripting (XSS) attacks involve injecting malicious scripts, typically JavaScript within `<script>` tags, into legitimate web pages. When other users view these compromised pages, the malicious script executes in their browser, allowing attackers to steal session cookies, deface websites, or redirect users.
A man-in-the-middle (MITM) attack involves an attacker intercepting communication between two parties, not typically by injecting scripts into a URL or input field.
SQL injection involves injecting malicious SQL queries into database input fields to manipulate or extract data from the database, not client-side scripts for browser execution.
Denial-of-service (DoS) attacks aim to make a service unavailable to its legitimate users, typically through overwhelming the system with traffic, not by injecting scripts into a web application.
Concept tested: Cross-Site Scripting (XSS) attack detection
Source: https://owasp.org/www-community/attacks/xss/
Topics
Community Discussion
No community discussion yet for this question.