PT0-003 · Question #202
A penetration tester finds it is possible to downgrade a web application's HTTPS connections to HTTP while performing on-path attacks on the local network. The tester reviews the output of the…
The correct answer is A. Add the HSTS header to the server. The tester identified an HTTPS downgrade attack (e.g., SSL stripping). The best mitigation is to enforce HSTS (HTTP Strict Transport Security). HSTS (Strict-Transport-Security) ensures that the browser always uses HTTPS, preventing downgrade attacks.
Question
A penetration tester finds it is possible to downgrade a web application's HTTPS connections to HTTP while performing on-path attacks on the local network. The tester reviews the output of the server response to:
HTTP/2 302 date: Thu, 11 Jan 2024 15:56:24 GMT content-type: text/html; charset=iso-8859-l location: /login x-content-type-options: nosniff server: Prod Which of the following recommendations should the penetration tester include in the report?
Options
- AAdd the HSTS header to the server.
- BAttach the httponly flag to cookies.
- CFront the web application with a firewall rule to block access to port 80.
- DRemove the x-content-type-options header.
How the community answered
(21 responses)- A81% (17)
- B14% (3)
- D5% (1)
Explanation
The tester identified an HTTPS downgrade attack (e.g., SSL stripping). The best mitigation is to enforce HSTS (HTTP Strict Transport Security). HSTS (Strict-Transport-Security) ensures that the browser always uses HTTPS, preventing downgrade attacks.
Topics
Community Discussion
No community discussion yet for this question.