nerdexam
EC-Council

312-50V12 · Question #265

Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to…

The correct answer is B. Nmap. Burp Suite is a widely used security testing tool specifically designed for web applications. It includes features such as an intercepting proxy that allows the tester to inspect and modify HTTP traffic between the browser and the target application. It can be used to identify…

Submitted by takeshi77· Mar 4, 2026Web Application Hacking

Question

Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to test for any security loopholes by hijacking a session between a client and server. This tool has a feature of intercepting proxy that can be used to inspect and modify the traffic between the browser and target application. This tool can also perform customized attacks and can be used to test the randomness of session tokens. Which of the following tools is used by Gregory in the above scenario?

Options

  • AWireshark
  • BNmap
  • CBurp Suite
  • DCxSAST

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    87% (27)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Burp Suite is a widely used security testing tool specifically designed for web applications. It includes features such as an intercepting proxy that allows the tester to inspect and modify HTTP traffic between the browser and the target application. It can be used to identify security vulnerabilities, perform customized attacks, and test the randomness of session tokens.

Topics

#Burp Suite#session hijacking#intercepting proxy#web application testing

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice