Flashcards
Web App Atks
Cards in this deck (11)
- 1The inspection tool in firefox can be used to reveal ...blank form fields
- 2When encountering directory traversal, the first files we should look for aressh keys ../../../../../../home/[USER]/.ssh/id_rsa
- 3why should we not use browsers for web application assessmentsthey try to optimize elements for user friendliness
- 4which OS (windows or linux) has easier directory travesersallinux
- 5what is the typical pathway for directory traversal attacks in linuxdisplay /etc/passwd to look for users then check for private keys in their home dir
- 6to find sensitive files on windows using directory traversal you should...research the running application or service (e.g. IIS) and lookup the location of logs and .config files (C:\inetpub\wwwroot\web.config)
- 7what is the difference between directory traversal and LFIdir trav allows you to read files, LFI allows execution
- 8what is log poisoningLFI of access.log file that has been poisoned with executable code via a modified request
- 9what is a piece of evidence of LFIunclosed html tags
- 10what setting needs to be enabled to allow for the use of the data:// wrapperallow_url_include
- 11—
Information
- Description
- GRE OSCP Flashcards on Web App Atks, created by Brooks Johnson on 03/11/2025.
- Created by
- Brooks Johnson · Nov 2025
- Updated
- Nov 4, 2025
- Views
- 0
- Rating