You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply.

Question

Accepted Answer

A. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL Reviewing HTML-formatted emails for embedded scripts or suspicious URL parameters can reveal XSS payloads delivered or exfiltrated through email, which is a common vector for reflected and stored XSS attacks. B. Use a Web proxy to view the Web server transactions in real time and investigate any communication A web proxy positioned between client and server captures all HTTP and HTTPS transactions in real time, allowing the investigator to inspect request and response bodies for injected scripts or anomalous parameters characteristic of XSS activity. D. Look at the Web servers logs and normal traffic logging. Web server logs record all incoming requests including full URLs and query strings, which may contain XSS payloads, making log analysis one of the primary and most reliable methods for identifying and tracing XSS attack attempts.

Answer

C. Use Wireshark to capture traffic going to the server and then searching for the requests going to the Wireshark captures raw network-layer packets and cannot decrypt HTTPS traffic, which means it lacks the application-layer visibility needed to inspect injected scripts within encrypted web transactions during an XSS investigation.

You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation…

Question

Options

How the community answered

Why each option

Topics

Community Discussion