OSWE Source Code Vulnerability Analysis

1. What vulnerability allows attackers to access files outside the intended directory?

Local file inclusion (LFI)

Remote code execution

Broken authentication

Sensitive data exposure

2. True or False: Sensitive data should never be logged or stored in source code comments.

True

False

3. In web application security, what does 'security misconfiguration' typically involve?

Unnecessary services enabled or default credentials present

Strong encryption algorithms

Multi-factor authentication

Regular security updates

4. What is the primary defense against command injection attacks in source code?

Input validation and avoiding system command execution

Using firewalls

Enabling verbose logging

Increasing server resources

5. True or False: A SQL query using string concatenation is safe if input is checked for SQL keywords.

True

False

6. Which of these is a sign of insecure direct object references (IDOR)?

Predictable IDs without authorization validation

Using random UUID identifiers

Implementing role-based access control

Encrypting user IDs

7. In source code analysis, what indicates a broken access control vulnerability?

Users accessing resources without proper authorization checks

Strong password requirements

Session timeout enforcement

HTTPS certificate validation

8. What does 'insecure deserialization' vulnerability allow attackers to do?

Execute arbitrary code through malicious objects

Improve application performance

Encrypt sensitive data

Bypass firewall rules

9. True or False: Encryption alone prevents SQL injection vulnerabilities.

True

False

10. In API security analysis, what is a critical flaw in this endpoint: GET /api/user?id=123?

No authentication or authorization checks

Uses HTTP instead of HTTPS

Returns JSON format

Accepts GET requests

11. In a SQL injection vulnerability, what does the attacker manipulate to execute unintended database commands?

User input within SQL query strings

Database connection parameters

Server log files

Network packet headers

12. True or False: Relying on client-side validation alone is sufficient for input security.

True

False

13. Which function is vulnerable when used to prevent XSS without proper context awareness?

Strip_tags()

Htmlspecialchars()

Preg_replace()

Htmlentities() with ENT_QUOTES

14. In source code review, what indicates improper error handling that leaks sensitive information?

Stack traces displayed to users

Generic error messages

Logging all user actions

Using try-catch blocks

15. What does CSRF protection typically involve in secure applications?

Unique tokens validated per request

Storing passwords in plain text

Disabling HTTPS

Allowing cross-origin requests

16. True or False: Parameterized queries completely prevent SQL injection attacks.

True

False

17. Which vulnerability occurs when an application trusts user-supplied file paths without validation?

Cross-site request forgery

Path traversal

Broken access control

Insecure deserialization

18. In authentication bypass analysis, what vulnerability allows attackers to skip login verification?

Weak session token generation

Strong password policies

Two-factor authentication

HTTPS enforcement

19. What is the primary risk of hardcoded credentials in source code?

Increased application performance

Unauthorized access if code is exposed

Improved user authentication speed

Better encryption of database passwords

20. Which of the following code patterns is most vulnerable to cross-site scripting (XSS) attacks?

Echo htmlspecialchars($_GET['input']);

Echo $_GET['input'];

Echo filter_var($_GET['input'], FILTER_SANITIZE_STRING);

Echo urlencode($_GET['input']);

OSWE Source Code Vulnerability Analysis Quiz

1. What vulnerability allows attackers to access files outside the intended directory?

2.

What first name or nickname would you like us to use?

2. True or False: Sensitive data should never be logged or stored in source code comments.

3. In web application security, what does 'security misconfiguration' typically involve?

4. What is the primary defense against command injection attacks in source code?

5. True or False: A SQL query using string concatenation is safe if input is checked for SQL keywords.

6. Which of these is a sign of insecure direct object references (IDOR)?

7. In source code analysis, what indicates a broken access control vulnerability?

8. What does 'insecure deserialization' vulnerability allow attackers to do?

9. True or False: Encryption alone prevents SQL injection vulnerabilities.

10. In API security analysis, what is a critical flaw in this endpoint: GET /api/user?id=123?

11. In a SQL injection vulnerability, what does the attacker manipulate to execute unintended database commands?

12. True or False: Relying on client-side validation alone is sufficient for input security.

13. Which function is vulnerable when used to prevent XSS without proper context awareness?

14. In source code review, what indicates improper error handling that leaks sensitive information?

15. What does CSRF protection typically involve in secure applications?

16. True or False: Parameterized queries completely prevent SQL injection attacks.

17. Which vulnerability occurs when an application trusts user-supplied file paths without validation?

18. In authentication bypass analysis, what vulnerability allows attackers to skip login verification?

19. What is the primary risk of hardcoded credentials in source code?

20. Which of the following code patterns is most vulnerable to cross-site scripting (XSS) attacks?