Exam SY0-601 topic 1 question 551 discussion

Segment by segment: URL Structure: The URL starts with "https://www.c0mpt1a.com/contact-us/," which is a typical URL structure for a website's contact page. This part appears normal. Query Parameter: Following the "/", there is a query parameter represented as "?name=". Query parameters in a URL are often used to pass data to a web application. Payload: After the "name=" query parameter, there is a URL-encoded string: "%3Cscript%3Ealert(document.cookie)%3C%2Fscript%3E". Let's decode and analyze this payload step by step: "%3C" represents "<" in URL encoding, and "%3E" represents ">". So, "%3Cscript%3E" is "<script>", and "%3C%2Fscript%3E" is "</script>" in HTML. Between the "<script>" and "</script>" tags, there is JavaScript code: "alert(document.cookie)".

In this scenario, the malicious actor injected a script into the URL parameters of the website's contact-us page. When users click the link, the injected script will execute in their browsers, displaying an alert containing their cookies. This allows the attacker to potentially steal sensitive information or perform other malicious actions on the affected users' behalf. XSS attacks occur when web applications do not properly validate and sanitize user input, allowing malicious code to be executed on other users' browsers.

wait... if comptia is so precise in this question... leaving no ambiguity in the question that it is XSS... i am very suspicious of QN 541. now.. 541. A user's login credentials were recently compromised. During the investigation, the security analyst determined the user input credentials into a pop-up window when prompted to confirm the username and password. However, the trusted website does not use a pop-up for entering user credentials. Which of the following attacks occurred? A. Cross-site scripting B. SQL injection C. DNS poisoning D. Certificate forgery Maybe the answer for Q541 is DNS poisoning then..?

Letra D. O ataque demonstrado no URL fornecido é um exemplo clássico de XSS. A URL parece ser uma parte do site da empresa (https://www.c0mpt1a.com/contact-us/), mas o parâmetro "name" foi manipulado pelo ator mal-intencionado para incluir um código JavaScript malicioso: "<script>alert(document.cookie)</script>".

Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it.