200-201 · Question #382
Refer to the exhibit. Which attack is being attempted against a web application?
The correct answer is A. command injection. The exhibit shows an HTTP GET request with a parameter that includes ; /bin/sh -c id. This indicates a command injection attempt, where the attacker is trying to execute shell commands Command injection vulnerabilities allow an attacker to execute arbitrary commands on the host…
Question
Refer to the exhibit. Which attack is being attempted against a web application?
Exhibit
Options
- Acommand injection
- Bman-in-the-middle
- Cdenial of service
- DSQL injection
How the community answered
(22 responses)- A91% (20)
- B5% (1)
- C5% (1)
Explanation
The exhibit shows an HTTP GET request with a parameter that includes ; /bin/sh -c id. This indicates a command injection attempt, where the attacker is trying to execute shell commands Command injection vulnerabilities allow an attacker to execute arbitrary commands on the host operating system via a vulnerable application. The use of /bin/sh and the -c flag is typical in command injection exploits to run shell commands, such as id, which returns user identity information.
Topics
Community Discussion
No community discussion yet for this question.
