PenTest+ V2 Exploiting Misconfigured Services

1. A Tomcat server exposes the manager interface without authentication. An attacker can use this to deploy malicious WAR files. What type of misconfiguration is this?

Missing input validation

Insufficient access controls

Weak encryption

Protocol misconfiguration

2. Which misconfiguration allows attackers to bypass authentication by exploiting predictable session tokens?

Weak cryptographic algorithms

Insufficient randomization

Missing rate limiting

Unencrypted cookies

Submit

4. An API endpoint returns sensitive information in response headers or error messages. What misconfiguration is this?

Insecure deserialization

Information disclosure

Broken authentication

XML external entity injection

Submit

6. Docker containers running with privileged mode represent which type of misconfiguration?

Network isolation failure

Excessive privilege assignment

Missing encryption

Unencrypted secrets

7. A misconfigured CORS policy allows requests from any origin. What vulnerability does this introduce?

Session fixation

Unauthorized data access

Cross-origin resource sharing attacks

Cache poisoning

Submit

9. A Redis instance is accessible remotely without password protection. Which exploitation method is most direct?

Brute-force attack

Direct connection and command execution

SQL injection

Cross-site scripting

Submit

11. Which HTTP method is most commonly left enabled on misconfigured web servers and can allow an attacker to upload malicious files?

GET

POST

PUT

DELETE

12. Which of the following is NOT a typical misconfiguration that leads to exploitation?

Default credentials

Unnecessary services running

Strong password policies

Unpatched software

Submit

14. An S3 bucket is configured with public read access. Which cloud misconfiguration does this represent?

Insecure API endpoints

Excessive permissions

Missing encryption

Disabled logging

Submit

16. A web application displays detailed error messages revealing the backend database type and query syntax. What misconfiguration does this represent?

Weak encryption

Verbose error handling

Missing WAF rules

Unpatched software

17. Which service typically runs on port 3306 and often has weak default configurations?

PostgreSQL

MySQL

SQL Server

MongoDB

Submit

19. SMB shares that are world-readable without credentials represent which security misconfiguration?

Port forwarding enabled

Excessive file permissions

Protocol downgrade

Firewall bypass

20. A database server is accessible over the network without authentication. What type of misconfiguration is this?

Default credentials

Missing access controls

Unencrypted traffic

Verbose error messages

PenTest+ V2 Exploiting Misconfigured Services Quiz

1. A Tomcat server exposes the manager interface without authentication. An attacker can use this to deploy malicious WAR files. What type of misconfiguration is this?

2.

What first name or nickname would you like us to use?

2. Which misconfiguration allows attackers to bypass authentication by exploiting predictable session tokens?

3. A misconfigured firewall rule allows traffic on port 22 from any IP address. This creates a ____ exposure.

4. An API endpoint returns sensitive information in response headers or error messages. What misconfiguration is this?

5. A backup server stores database dumps in a world-readable directory. This misconfiguration allows attackers to access ____.

6. Docker containers running with privileged mode represent which type of misconfiguration?

7. A misconfigured CORS policy allows requests from any origin. What vulnerability does this introduce?

8. An application uses HTTP instead of HTTPS for sensitive operations. This misconfiguration enables ____ attacks.

9. A Redis instance is accessible remotely without password protection. Which exploitation method is most direct?

10. Jenkins servers left unsecured allow attackers to execute arbitrary code. This represents a ____ misconfiguration.

11. Which HTTP method is most commonly left enabled on misconfigured web servers and can allow an attacker to upload malicious files?

12. Which of the following is NOT a typical misconfiguration that leads to exploitation?

13. A web server is running with directory listing enabled. Attackers can exploit this to ____.

14. An S3 bucket is configured with public read access. Which cloud misconfiguration does this represent?

15. SNMP community strings set to 'public' or 'private' allow attackers to gather sensitive network information. This is a ____ misconfiguration.

16. A web application displays detailed error messages revealing the backend database type and query syntax. What misconfiguration does this represent?

17. Which service typically runs on port 3306 and often has weak default configurations?

18. An FTP server allows anonymous login without a password. This is an example of ____.

19. SMB shares that are world-readable without credentials represent which security misconfiguration?

20. A database server is accessible over the network without authentication. What type of misconfiguration is this?