A penetration tester is testing a new API for the company's existing services and is preparing the following script: Which of the following would the test discover?

The correct answer is C. Supported HTTP methods. The script is using the requests library to send an OPTIONS request to the API endpoint, which returns a list of supported HTTP methods for that resource. This can help the penetration tester to identify potential attack vectors or vulnerabilities based on the methods allowed.

Reconnaissance and enumeration

Question

A penetration tester is testing a new API for the company's existing services and is preparing the following script:

Which of the following would the test discover?

Options

ADefault web configurations
BOpen web ports on a host
CSupported HTTP methods
DListening web servers in a domain

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
C
90% (19)

Explanation

The script is using the requests library to send an OPTIONS request to the API endpoint, which returns a list of supported HTTP methods for that resource. This can help the penetration tester to identify potential attack vectors or vulnerabilities based on the methods allowed.

Topics

#API Testing#HTTP Methods#Enumeration#Web Application Security

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice