DOS-Cybercrimes-PenTesting

Question 1

What are the top 5 most common security attacks?

Answer 1

1. Injection, 2 XSS 3 Broken Auth Sessions 4 Insecure Direct Object References 5 Sensitive Data Exposure

Question 2

Sites on the internent as of 2015
How many sites google quarentines everyday
Malicious sites identified

Answer 2

1000000000
100000
30,000

Question 3

Name the characteristics of a Sandbox

Answer 3

Lightweight and easy to set up; data is not saved when application closes; anything changed or created is not visible beyond its boundaries

Question 4

Name the characteristics of a Virtual Machine

Answer 4

Anything changed or created is not visible beyond its borders; machine within a machine; lightweight and easy to set up; disk space must be allocated to the application

Question 5

Which of the following are true?

• CORS allows cross-domain communication from the browser
• CORS requires coordination between the server and the client
• CORS is not widely supported by browsers
• CORS header can be used to secure resources on a website

Answer 5

• CORS allows cross-domain communication from the browser

- CORS requires coordination between the server and the client

Question 6

What is a definition of an origin?

Answer 6

A combination of URI scheme, hostname, and port number

Question 7

Which of the following have the same origin to http://www.example.com/dir/page.html ?

Answer 7

http: //www.example.com/dir2/page.html
http: //www.example.com/dir2/page.html
http: //username:password@www.example.com/dir2

Question 8

Type of cookie: Super

Answer 8

Cookie within an origin of a top level domain

Question 9

Type of cookie: Zombie

Answer 9

Cookie that regenerates after its deleted

Question 10

Type of cookie: Samesite

Answer 10

Cookie that can only be sent in requests originating from the same origin as the target domain

Question 11

Type of cookie: HttpOnly

Answer 11

Cookie that can not be accessed via client side apis

Question 12

Type of cookie: Thirdparty

Answer 12

Cookie that belongs to a domain different from the one in the address bar

Question 13

Type of cookie: session

Answer 13

In-memory cookie; it doesn’t have an expiration date and is deleted when the browser closes

Question 14

Type of cookie: persistent

Answer 14

Cookie that has expiration date and time; also called tracking cookies

Question 15

Type of cookie: secure

Answer 15

A cookie that can only be transmitted over an encrypted connection

Question 16

Which of the following are true?

• Cryptographic hash functions that are not one-way are vulnerable to preimage attacks
• difficult hash function is one that takes a long time to calculate
• A good cryptographic hash function should employ an avalanche effect

Answer 16

• Cryptographic hash functions that are not one-way are vulnerable to preimage attacks
• A good cryptographic hash function should employ an avalanche effect

Question 17

Which events trigger penetration testing?

• infra is added or modified
• applications are added or modified
• end-user policies change
• security patches are installed

Answer 17

All the above

Question 18

Steps of RSA attack

Answer 18

1. Identify 2. Email 3. Executable

Question 19

Match the social engineering training tool with execution:

• used to determine which users click on links in emails
• signed Java applet is sent to user; a shell is sent back to the exploit server
• flash program is created that exploits the server
• email with attachment is downloaded and makes connection to exploit the server

Answer 19

Download connection - email with attachment is downloaded and makes connection to exploit the server

Click logger - used to determine which users click on links in emails

Reverse Shell Applet - signed Java applet is sent to user; a shell is sent back to the exploit server

Flash or CD autoplay - flash program is created that exploits the server

Question 20

Random Scanning

Answer 20

each compromised computer probes random addresses

Question 21

Permutation Scanning

Answer 21

All compromised computers share a common-pseudo random permutation of the IP address space

Question 22

Signpost scanning

Answer 22

Uses the communication patterns of a compromised computer to find new targets

Question 23

Hitlist scanning

Answer 23

a portion of the list of targets is supplied to the compromised computer