An attacker exploited a vulnerability on a mail server using the code below. Which of the following BEST explains what the attacker is doing?

Question

Accepted Answer

C. The attacker is replacing a document. The JavaScript `document.location.replace()` method is used to navigate to a new URL, effectively replacing the currently loaded document in the browser window and removing the current URL from the browser's session history. This action directly corresponds to 'replacing a document'.

Answer

A. The attacker is replacing a cookie. The code snippet does not interact with `document.cookie` or any other cookie-specific functions; it targets the `location` object to change the page URL.

Answer

B. The attacker is stealing a document. Stealing a document would typically involve extracting its content (e.g., via `document.body.innerHTML`) or sensitive data and sending it to an attacker-controlled server, not using `document.location.replace()` for redirection.

Answer

D. The attacker is deleting a cookie. Deleting a cookie involves manipulating the `document.cookie` property with an expired date or an empty string, actions not present in the provided code.

An attacker exploited a vulnerability on a mail server using the code below. <HTML><body onload=document.location.replace "URL:" +"document.location) ; /> </body> </HTML> Which of the following BEST…

Question

Options

How the community answered

Why each option

Topics

Community Discussion