Câu 80: PT0-003: CompTIA PenTest+
A penetration tester has found a web application that is running on a cloud virtual machine instance. Vulnerability scans show a potential SSRF for the same application URL path with an injectable parameter. Which of the following commands should the tester run to successfully test for secrets exposure exploitabilty?
Nội dung câu hỏi
A penetration tester has found a web application that is running on a cloud virtual machine instance. Vulnerability scans show a potential SSRF for the same application URL path with an injectable parameter. Which of the following commands should the tester run to successfully test for secrets exposure exploitabilty?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. curl ?param=http://169.254.169.254/latest/meta-data/ — đáp án hiện tại
- B. curl ' ?param=http://127.0.0.1/etc/passwd'
- C. curl ' ?param= alert(1} /'
- D. curl ?param=http://127.0.0.1/
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.