PT0-002 · Question #248
During a web application test, a penetration tester was able to navigate to https://company.com and view all links on the web page. After manually reviewing the pages, the tester used a web scanner…
The correct answer is B. The tester IP was blocked. After manual browsing succeeded, the automated web scanner generated a high volume of requests that triggered the web application's security controls (such as a Web Application Firewall or intrusion prevention system), which detected the scanning activity and blocked the…
Question
During a web application test, a penetration tester was able to navigate to https://company.com and view all links on the web page. After manually reviewing the pages, the tester used a web scanner to automate the search for vulnerabilities. When returning to the web application, the following message appeared in the browser: unauthorized to view this page. Which of the following BEST explains what occurred?
Options
- AThe SSL certificates were invalid.
- BThe tester IP was blocked.
- CThe scanner crashed the system.
- DThe web page was not found.
How the community answered
(24 responses)- A8% (2)
- B71% (17)
- C4% (1)
- D17% (4)
Explanation
After manual browsing succeeded, the automated web scanner generated a high volume of requests that triggered the web application's security controls (such as a Web Application Firewall or intrusion prevention system), which detected the scanning activity and blocked the tester's IP address. This is a common response by defensive systems to automated scanning tools. Option A (invalid SSL certificates) would have presented a certificate warning during initial access, not after scanning. Option C (scanner crashed the system) would likely produce a server error (5xx), not an 'unauthorized' message. Option D (page not found) would produce a 404, not an unauthorized response.
Topics
Community Discussion
No community discussion yet for this question.