CAS-003 · Question #778
A threat analyst notices the following URL while going through the HTTP logs. Which of the following attack types is the threat analyst seeing?
The correct answer is D. XSS. Cross-Site Scripting (XSS) attacks are frequently delivered via malicious URLs where script payloads (e.g., <script>alert(1)</script> or JavaScript event handlers) are embedded in query parameters or path segments. When a victim's browser processes the URL and renders the…
Question
A threat analyst notices the following URL while going through the HTTP logs. Which of the following attack types is the threat analyst seeing?
Options
- ASQL injection
- BCSRF
- CSession hijacking
- DXSS
How the community answered
(35 responses)- A3% (1)
- C3% (1)
- D94% (33)
Explanation
Cross-Site Scripting (XSS) attacks are frequently delivered via malicious URLs where script payloads (e.g., <script>alert(1)</script> or JavaScript event handlers) are embedded in query parameters or path segments. When a victim's browser processes the URL and renders the injected script in a trusted page context, the attacker can steal cookies, redirect users, or execute arbitrary code. SQL injection (A) would show database query syntax (e.g., ' OR 1=1--) in the URL. CSRF (B) exploits authenticated sessions but the URL itself typically looks normal. Session hijacking (C) involves stealing an existing session token rather than injecting a script payload. The presence of script-like content in the URL parameters is the hallmark of a reflected XSS attack.
Topics
Community Discussion
No community discussion yet for this question.