A cybersecurity analyst reviews the log files from a web server and sees a series of files that indicate a directory traversal attack has occurred. Which of the following is the analyst MOST likely seeing?
A.
http://sample.url.com/
B.
http://sample.url.com/someotherpageonsite/../../../etc/shadow
C.
http://sample.url.com/select-from-database-where-password-null
D.
http://redirect.sameple.url.sampleurl.com/malicious-dns-redirect
i just glanced over the answers before reading the question and automatically knew it was going to be something about directories
we are well trained :')
This URL indicates a directory traversal attack, also known as path traversal or directory climbing attack. In this attack, the attacker tries to access files or directories outside of the web server's intended directory structure by manipulating the URL. The ".." sequences are used to navigate up the directory hierarchy and potentially reach sensitive files or directories.
By including "../" multiple times, the attacker attempts to traverse back to the root directory ("/") and then access the "/etc/shadow" file, which typically stores encrypted password hashes on Unix-like systems. This is a common target for attackers as it may contain valuable information that can be used for further exploitation.
B. http://sample.url.com/someotherpageonsite/../../../etc/shadow
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.SY0-601 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Danzix
Highly Voted 2 years, 4 months agoPesos
Most Recent 1 year, 2 months agosubaie503
1 year, 4 months agoTeleco0997
1 year, 7 months agoApplebeesWaiter1122
2 years agoJibz18
2 years, 4 months agosdc939
2 years, 4 months agosdc939
2 years, 4 months ago