Exam 312-50v12 topic 1 question 217 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 217
Topic #: 1

As part of a penetration testing team, you've discovered a web application vulnerable to Cross-Site Scripting (XSS). The application sanitizes inputs against standard XSS payloads but fails to filter out HTML-encoded characters. On further analysis, you've noticed that the web application uses cookies to track session IDs. You decide to exploit the XSS vulnerability to steal users' session cookies. However, the application implements HTTPOnly cookies, complicating your original plan. Which of the following would be the most viable strategy for a successful attack?

A. Build an XSS payload using HTML encoding and use it to exploit the server-side code, potentially disabling the HTTPOnly flag on cookies.
B. Develop a browser exploit to bypass the HTTPOnly restriction, then use a HTML-encoded XSS payload to retrieve the cookies.
C. Utilize an HTML-encoded XSS payload to trigger a buffer overflow attack, forcing the server to reveal the HTTPOnly cookies.
D. Create a sophisticated XSS payload that leverages HTML encoding to bypass the input sanitization, and then use it to redirect users to a malicious site where their cookies can be captured.

Show Suggested Answer

Suggested Answer: D 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

qtygbapjpesdayazko

9 months, 2 weeks ago

Selected Answer: D

The correct id D:

upvoted 1 times

...

insaniunt

10 months, 1 week ago

Selected Answer: D

D. Create a sophisticated XSS payload that leverages HTML encoding to bypass the input sanitization, and then use it to redirect users to a malicious site where their cookies can be captured

upvoted 1 times

...

LeongCC

10 months, 2 weeks ago

Selected Answer: D

D. Create a sophisticated XSS payload that leverages HTML encoding to bypass the input sanitization, and then use it to redirect users to a malicious site where their cookies can be captured, focuses on redirection or other client-side manipulations rather than directly bypassing HTTPOnly protections. This method adheres to the constraints and aims to exploit the vulnerability in a way that can lead to compromising the user's session or data indirectly, such as through phishing or other deceptive means at the redirected location.

upvoted 1 times

...

lukinno

10 months, 2 weeks ago

Selected Answer: D

From Copilot: B. Develop a browser exploit to bypass the HTTPOnly restriction, then use a HTML-encoded XSS payload to retrieve the cookies. This option is more promising. If you can find a browser vulnerability or exploit (such as a same-origin policy bypass), you might be able to access the HTTPOnly cookies from client-side JavaScript. However, finding such an exploit can be challenging, and it’s not a guaranteed method. Potentially viable, but difficult. D. Create a sophisticated XSS payload that leverages HTML encoding to bypass the input sanitization, and then use it to redirect users to a malicious site where their cookies can be captured. This strategy is practical. By crafting a clever XSS payload that evades input sanitization, you can execute arbitrary JavaScript on the victim’s browser. Redirecting users to a malicious site allows you to capture their cookies. Most viable option.

upvoted 1 times

...