Tag: security

Quizzes (70) Questions (1339)

Questions Related to security

Multiple choice technology security

While analyzing your application you observed that a part of your application is accessed using the domain name whereas the login url is defined as http://10.1.52.3/apps/login.asp. How will you configure appscan to test this application?

  1. Add the domain name in the “Additional servers and domains” section in the scan configuration

  2. Add 10.1.52.3 in the “Additional servers and domains” section in the scan configuration

  3. Put the domain name in the login url

  4. Change the application code to reflect the domain name every where
Reveal answer Fill a bubble to check yourself
A Correct answer
Full explanation
Multiple choice technology security

AppScan sent the following test HTTP request: GET /web/content/index.php?file=/../../../../../../../../etc/passwd%00 HTTP/1.0 Cookie: JSESSIONID=dqt0LSnfhdVyTJkCwTwfLQQSkTTGYX9D79tLLpT1yLQjVhSpZKP9!914376523; customerLanguage=en Accept: / Accept-Language: en-US User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32) Host: www.ibm.com Although, there is no indication in the response about the existence of a password file, AppScan reported vulnerability with the following reasoning: Global Validation found an embedded script in the response (alert(25053)), which was probably injected by a previous test. The presence of this script in the site suggests that the application is vulnerable to which type of attack?

  1. Stored Cross-site Scripting

  2. Cross-site Scripting

  3. Namazu Path Traversal

  4. Directory Listing
Reveal answer Fill a bubble to check yourself
A Correct answer
Full explanation