Multiple choice technology security

If the characters %00%0A (CR+LF) are detected at the end of an input string this is most likely which of the following attacks?

  1. Cross Site Scripting

  2. Phishing

  3. SQL Injection

  4. HTTP Response Splitting
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

CR (carriage return, %0D or %00 in some encodings) and LF (line feed, %0A) are line break characters used to separate HTTP headers. Attackers inject these characters into input to split the HTTP response and inject arbitrary headers or even content. This is the signature of HTTP Response Splitting (also called CRLF injection).

AI explanation

HTTP Response Splitting attacks work by injecting carriage-return/line-feed (CR+LF, %0D%0A) sequences into input that gets reflected into response headers, letting an attacker terminate one header and inject a second forged response. Seeing CR/LF-style control characters appended to an input string is a classic fingerprint of this attack rather than XSS, phishing, or SQL injection, which don't rely on header line-termination sequences.

Keep practicing — related questions