Examine the image below. Which of the following defensive measures could be taken to control the activity?

The correct answer is C. Sanitize the input from external users to the web server. The Nessus CGI testing plugin created this activity on the web server. The server was vulnerable to cross site scripting and allows the nasl script to be uploaded during testing. The appropriate control for the event would be to ensure that the server and applications sanitize…

Web Application Attacks & Post-Exploitation

Question

Exhibit

Options

ABlock all traffic to the web server until a full investigation has been completed
BCreate an IDS signature that blocks iamawesome.nasl on the web servers
CSanitize the input from external users to the web server
DPing back to the host that uploaded the script to identify the host

How the community answered

(28 responses)

A
7% (2)
B
11% (3)
C
79% (22)
D
4% (1)

Explanation

The Nessus CGI testing plugin created this activity on the web server. The server was vulnerable to cross site scripting and allows the nasl script to be uploaded during testing. The appropriate control for the event would be to ensure that the server and applications sanitize their input prior to accepting and processing the information. These steps will ensure that only legitimate information reaches the application and will mitigate XSS.

Topics

#input sanitization#web application defense#IDS signature#script injection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice