1-10.3 Attack Vectors - Code

Question 1

The process of validating the output of a process before it is returned to recipient

Answer 1

Output validation

Question 2

Attack that uses a dot-dot-slash sequence

Answer 2

Directory traversal

Question 3

Injection of malicious code into a vulnerable web application that will execute in a victims browser

Answer 3

Persistent Cross Site Scripting

Question 4

Tricking an application into including unauthorized commands in the data sent to an interpreter

Answer 4

Injection Attack

Question 5

Injection of malicious code into a web app that initiates at the client side and ultimately executes in the victim’s browser

Answer 5

Reflective Cross Site Scripting