Multiple choice technology security

Appscan injected the following into a test request GET /bank/customize.aspx?lang=Foobar%3f%0d%0aAppScanHeader:%20AppScanValue%2f1%2e2%2d3%0d%0aSecondAppScanHeader: %20whatever HTTP/1.0. What kind of vulnerability is appscan testing for?

  1. Cross site request forgery

  2. Cross site scripting

  3. HTTP Response Splitting

  4. SQL injection
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The injected payload %0d%0a (CRLF characters) in the URL parameter attempts to inject arbitrary HTTP headers, which is the signature of HTTP Response Splitting attacks. These CRLF sequences allow attackers to manipulate HTTP responses by injecting counterfeit headers or content, potentially enabling cache poisoning or XSS attacks.

AI explanation

The injected payload contains CR/LF sequences (%0d%0a) followed by fake HTTP headers, which is the classic technique for HTTP Response Splitting/header injection — tricking the server into echoing unsanitized input in a way that lets an attacker inject extra headers or even a whole second response. It isn't CSRF (which forges a request on a user's behalf), XSS (which injects script into rendered content), or SQL injection (which targets a database query).

Keep practicing — related questions