A penetration tester is conducting an assessment of a web application's login page. The tester needs to determine whether there are any hidden form fields of interest. Which of the following is the…

The correct answer is D. HTML scraping. Hidden form fields in web applications can store user roles, session tokens, and security parameters that attackers may exploit. Involves analyzing HTML source code to find hidden fields like: <input type="hidden" name="admin_access" value="true"> Attackers use tools like Burp…

Submitted by khalil_dz· Mar 6, 2026Vulnerability Discovery and Analysis

Question

A penetration tester is conducting an assessment of a web application's login page. The tester needs to determine whether there are any hidden form fields of interest. Which of the following is the most effective technique?

Options

AXSS
BOn-path attack
CSQL injection
DHTML scraping

How the community answered

(36 responses)

A
3% (1)
C
3% (1)
D
94% (34)

Explanation

Hidden form fields in web applications can store user roles, session tokens, and security parameters that attackers may exploit. Involves analyzing HTML source code to find hidden fields like: <input type="hidden" name="admin_access" value="true"> Attackers use tools like Burp Suite, ZAP, or browser developer tools (Ctrl+U or Inspect Element) to locate hidden fields.

Topics

#Web application testing#HTML scraping#Hidden form fields#Reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice