Flashcards
Web App Atks
Flashcards do conjunto (11)
- 1The inspection tool in firefox can be used to reveal ...blank form fields
- 2When encountering directory traversal, the first files we should look for aressh keys ../../../../../../home/[USER]/.ssh/id_rsa
- 3why should we not use browsers for web application assessmentsthey try to optimize elements for user friendliness
- 4which OS (windows or linux) has easier directory travesersallinux
- 5what is the typical pathway for directory traversal attacks in linuxdisplay /etc/passwd to look for users then check for private keys in their home dir
- 6to find sensitive files on windows using directory traversal you should...research the running application or service (e.g. IIS) and lookup the location of logs and .config files (C:\inetpub\wwwroot\web.config)
- 7what is the difference between directory traversal and LFIdir trav allows you to read files, LFI allows execution
- 8what is log poisoningLFI of access.log file that has been poisoned with executable code via a modified request
- 9what is a piece of evidence of LFIunclosed html tags
- 10what setting needs to be enabled to allow for the use of the data:// wrapperallow_url_include
- 11—
Informações
- Descrição
- GRE OSCP FlashCards sobre Web App Atks, criado por Brooks Johnson em 03-11-2025.
- Criado por
- Brooks Johnson · nov 2025
- Atualizado
- 4 nov 2025
- Visualizações
- 0
- Avaliação