Which of the following best describes the process of fuzzing in web application security?

Sending random or malformed inputs to find vulnerabilities

What is the main purpose of the -sV flag in Nmap?

To perform a version scan on services

WhatWeb is mainly used for identifying which of the following?Open ports on a server

Server configurations and technologies used

What is the primary goal of the reconnaissance phase in penetration testing?

Gather information about the target

studbud

WAPT ACTIVITY 1

12 termsStudBud Administration26 plays

Imported from external platform

Flashcards12 cardsFPractice quizPHost liveL

Questions 12

Answers

1
Which one is not part of PTES?
Reconnaisance
Implementation
Reporting
Exploitation
2
Which of the following best describes the process of fuzzing in web application security?
Scanning the web server for outdated software versions
Sending random or malformed inputs to find vulnerabilities
Testing the application’s encryption algorithms
Attacking a server by overwhelming it with requests
3
Which of the following tools can be used for fuzzing web applications to identify vulnerabilities?
WhatWeb
Nikto
Nmap
Burp Suite
4
SQL Injection is best categorized under which type of vulnerability?
Input validation
Session management
Authentication bypass
Logic flaw
5
What is the goal of exploitation in WAPT?
To gather logs
To fix vulnerabilities
To gain unauthorized access
To brute-force passwords
6
Which tool is commonly used to map the network and identify open ports on a target machine?
Nmap
Metasploit
Browser Dev Tools
Burp Suite
7
Which of the following is a tool commonly used for vulnerability scanning in web applications?
Nmap
John the Ripper
Wireshark
Burp Suite
8
In PTES, which phase comes after Exploitation?
Threat Modeling
Reporting
Intelligence GatheringPost-Exploitation
Post-Exploitation
9
Which of the following is a common entry point in a web application?
Hard disk sectors
Backup power supply
Source code repository
Login form
10
What is the main purpose of the -sV flag in Nmap?
To disable host discovery
To scan for specific IP addresses
To perform a version scan on services
To scan for vulnerabilities
11
WhatWeb is mainly used for identifying which of the following?Open ports on a server
Weak passwords in databases
Vulnerabilities in web applications
Open ports on a server
Server configurations and technologies used
12
What is the primary goal of the reconnaissance phase in penetration testing?
Exploit vulnerabilities
Establish persistence
Modify the source code
Gather information about the target

WAPT ACTIVITY 1 Flashcards | StudBud