A penetration tester conducted an assessment on a web server. The logs from this session show the following: Which of the following attacks is being attempted?

The correct answer is C. Parameter pollution. All input validation flaws are caused by unsanitized data flows between the front-end and the several back-ends of a web application. HTTP Parameter Pollution (HPP) attacks can be defined as the feasibility to override or add HTTP GET/POST parameters by injecting query string…

Attacks and Exploits

Question

A penetration tester conducted an assessment on a web server. The logs from this session show the following:

Which of the following attacks is being attempted?

Options

AClickjacking
BSession hijacking
CParameter pollution
DCookie hijacking
ECross-site scripting

How the community answered

(45 responses)

A
2% (1)
B
9% (4)
C
76% (34)
D
2% (1)
E
11% (5)

Explanation

All input validation flaws are caused by unsanitized data flows between the front-end and the several back-ends of a web application. HTTP Parameter Pollution (HPP) attacks can be defined as the feasibility to override or add HTTP GET/POST parameters by injecting query string Users WHERE id=3 - Source: https://owasp.org/www-pdf-archive/AppsecEU09_CarettoniDiPaola_v0.8.pdf

Topics

#Web application attacks#HTTP parameter pollution#Vulnerability identification#Attack types

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice