Ethical Hacking Final Exam Review
Questions and Correct Answers
GET Request ✅Used for requests for pages, resources, etc.
POST Requests ✅Used for form submissions, logins, etc.
OS Command Attacks ✅a web security vulnerability that allows an attacker to execute
arbitrary operating system (OS) commands on the server that is running an application,
and typically fully compromise the application and all its data.
SQL injection attack ✅a common attack vector that uses malicious SQL code for
backend database manipulation to access information that was not intended to be
displayed.
Insert, Select, Update, Delete ✅Use to access records in SQL Databases
CREATE, DROP ✅Used to add or delete a table in a SQL Database
How SQL attack happens ✅occurs when the application accepts a malicious user
input and then uses it as a part of SQL statement to query a backend database.
An attacker can inject SQL control characters and command keywords (e.g., single
quote ('), double quote ("), equal (=), comment (- -), etc.) to change the query structure
SQL countermeasures ✅utilizing parameterized database queries with bound, typed
parameters and careful use of parameterized stored procedures in the database.
Web Security ✅Ensuring that your website or web application is secure
Goals of Web Security ✅Safely Browse the web
a malicious website cannot steal information from or modify legitimate sites or otherwise
harm the user
Web Browser ✅Many different clients
all implanted differently
What vulnerabilities consul be in web browsers ✅Browsers (like any software) can
contain exploitable bugs
Often enable remote code execution by websites
Web applications ✅Online banking, shopping, blogs, social media, Office Docs,
Mix of server-side and client-side code
, Server-side written in multiple languages E.g., PHP, Ruby, ASP, JSP
Client-side code written in JavaScript
Often written with little consideration for security
Web Browser Security ✅Responsible for security confining content presented by
visited websites
SQL Injection ✅when browser sends malicious input to server changing SQL query
XSS ✅Bad website sends innocent Victor a script that steals information from honest
website
CSRF ✅Bad website sends request to good website, using credentials of innocent
victim who visits site
Web Browser security issues ✅Browse design vulnerabilities
Browser implementation vulnerabilities
attacks running under host os
attacks from network
Browser Sandbox ✅protect local system from web attack
protect/isolate web content from another web content
Same Origin Policy ✅protect web content from another web content
Browser Security Model ✅Website from different domains can't interact except in
limited ways
Same origin
Browser cookies
Including external scripts isn't prohibited by SOP, therefore attacker can steal cookies.
Cross-Origin Communication
What is Penetration testing ✅a stimulated cyber attack against your computer system
to check for exploitable vulnerabilities
why perform a penetration test ✅tests an organizations security to help personnel
learn how to handle any type of breaking from a malicious entity
challenges of penetration testing ✅PT is intentionally breaking into systems
(virtually/physical); What if you break into the wrong systems? Either those that they
didn't want to be tested or even worse, not the
organization's systems at all! What if you cause damage as a result of your testing?
Downtime, loss of data, PII data breach; What if you embarrass someone powerful who
wasn't part of
arranging the PT?
Questions and Correct Answers
GET Request ✅Used for requests for pages, resources, etc.
POST Requests ✅Used for form submissions, logins, etc.
OS Command Attacks ✅a web security vulnerability that allows an attacker to execute
arbitrary operating system (OS) commands on the server that is running an application,
and typically fully compromise the application and all its data.
SQL injection attack ✅a common attack vector that uses malicious SQL code for
backend database manipulation to access information that was not intended to be
displayed.
Insert, Select, Update, Delete ✅Use to access records in SQL Databases
CREATE, DROP ✅Used to add or delete a table in a SQL Database
How SQL attack happens ✅occurs when the application accepts a malicious user
input and then uses it as a part of SQL statement to query a backend database.
An attacker can inject SQL control characters and command keywords (e.g., single
quote ('), double quote ("), equal (=), comment (- -), etc.) to change the query structure
SQL countermeasures ✅utilizing parameterized database queries with bound, typed
parameters and careful use of parameterized stored procedures in the database.
Web Security ✅Ensuring that your website or web application is secure
Goals of Web Security ✅Safely Browse the web
a malicious website cannot steal information from or modify legitimate sites or otherwise
harm the user
Web Browser ✅Many different clients
all implanted differently
What vulnerabilities consul be in web browsers ✅Browsers (like any software) can
contain exploitable bugs
Often enable remote code execution by websites
Web applications ✅Online banking, shopping, blogs, social media, Office Docs,
Mix of server-side and client-side code
, Server-side written in multiple languages E.g., PHP, Ruby, ASP, JSP
Client-side code written in JavaScript
Often written with little consideration for security
Web Browser Security ✅Responsible for security confining content presented by
visited websites
SQL Injection ✅when browser sends malicious input to server changing SQL query
XSS ✅Bad website sends innocent Victor a script that steals information from honest
website
CSRF ✅Bad website sends request to good website, using credentials of innocent
victim who visits site
Web Browser security issues ✅Browse design vulnerabilities
Browser implementation vulnerabilities
attacks running under host os
attacks from network
Browser Sandbox ✅protect local system from web attack
protect/isolate web content from another web content
Same Origin Policy ✅protect web content from another web content
Browser Security Model ✅Website from different domains can't interact except in
limited ways
Same origin
Browser cookies
Including external scripts isn't prohibited by SOP, therefore attacker can steal cookies.
Cross-Origin Communication
What is Penetration testing ✅a stimulated cyber attack against your computer system
to check for exploitable vulnerabilities
why perform a penetration test ✅tests an organizations security to help personnel
learn how to handle any type of breaking from a malicious entity
challenges of penetration testing ✅PT is intentionally breaking into systems
(virtually/physical); What if you break into the wrong systems? Either those that they
didn't want to be tested or even worse, not the
organization's systems at all! What if you cause damage as a result of your testing?
Downtime, loss of data, PII data breach; What if you embarrass someone powerful who
wasn't part of
arranging the PT?
