CAS-001 · Question #194
Which of the following displays an example of a XSS attack?
The correct answer is A. <SCRIPT>. Cross-Site Scripting (XSS) attacks inject malicious client-side scripts into web pages viewed by other users. The '<SCRIPT>' tag is the canonical indicator of an XSS payload - an attacker embeds script tags into user-supplied input that is later rendered in another user's…
Question
Which of the following displays an example of a XSS attack?
Options
- A<SCRIPT>
- BChecksums-Sha1:7be9e9bac3882beab1abb002bb5cd2302c76c48d 1157 xfig_3.2.5.b-1.dsc
- C<form action="/cgi-bin/login" method=post>
- D#include
How the community answered
(35 responses)- A94% (33)
- B3% (1)
- C3% (1)
Explanation
Cross-Site Scripting (XSS) attacks inject malicious client-side scripts into web pages viewed by other users. The '<SCRIPT>' tag is the canonical indicator of an XSS payload - an attacker embeds script tags into user-supplied input that is later rendered in another user's browser, causing the browser to execute the attacker's code in the context of the trusted site. This can steal session cookies, redirect users, or perform actions on the victim's behalf. Option B is a SHA-1 integrity checksum. Option C is a legitimate HTML form used in normal web applications but not an attack pattern by itself. Option D is C/C++ code associated with buffer overflow vulnerabilities.
Topics
Community Discussion
No community discussion yet for this question.