A penetration tester is performing a black box assessment on a web-based banking application. The tester was only provided with a URL to the login page. Given the below code and output: Which of the…

The correct answer is B. Scrape the page for hidden fields. Web scraping automatically extracts data and presents it in a format that a tester can easily make sense of. In this scenario, Python is being used as the scraping language compared to a powerful library called Beautiful Soup. Beautiful Soup is a Python package for parsing HTML…

Reconnaissance and enumeration

Question

A penetration tester is performing a black box assessment on a web-based banking application. The tester was only provided with a URL to the login page. Given the below code and output:

Which of the following is the tester intending to do?

Options

AHorizontally escalate privileges.
BScrape the page for hidden fields.
CAnalyze HTTP response code.
DSearch for HTTP headers.

How the community answered

(21 responses)

A
5% (1)
B
76% (16)
C
14% (3)
D
5% (1)

Explanation

Web scraping automatically extracts data and presents it in a format that a tester can easily make sense of. In this scenario, Python is being used as the scraping language compared to a powerful library called Beautiful Soup. Beautiful Soup is a Python package for parsing HTML and XML documents. It creates a parse tree for parsed pages that can be used to extract data from HTML, which is useful for web scraping. Beautiful Soup helps a tester pull particular content from a web page, remove the HTML markup, and save the information. It is a tool for web scraping that helps clean up and parse the documents that have been pulled down from the Web.

Topics

#web application testing#hidden fields#black box testing#HTTP reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice