PenTest+ Web Application Attacks SQLi and XSS

1. Which of the following best describes stored XSS?

Malicious payload is saved in a database and executed when retrieved

Attack payload is only in the attacker's local cache

Script is stored in the browser's cookies

Malicious code is embedded in the server's binary

2. True or False: XSS vulnerabilities can only occur in the client-side JavaScript code.

True

False

Submit

4. Which OWASP mitigation technique involves treating all user input as untrusted?

Input validation and output encoding

Whitelist-only server responses

Disabling JavaScript entirely

Using only HTTPS connections

5. What is the primary risk of reflected XSS in a phishing attack?

Attacker can craft malicious URLs to steal session cookies or credentials

The attacker gains direct database access

The server automatically shuts down

User accounts are permanently deleted

6. True or False: Error-based SQLi relies on intentionally triggering database errors to extract data.

True

False

7. Which HTTP header can help prevent clickjacking and frame-based XSS?

X-Frame-Options

X-Content-Type-Options

Strict-Transport-Security

Access-Control-Allow-Origin

8. A common SQLi technique that extracts data character-by-character is called:

Boolean-based blind SQLi

Union-based SQLi

Error-based SQLi

Stacked queries

9. True or False: Content Security Policy (CSP) can help mitigate XSS attacks.

True

False

10. What is the primary defense against blind SQLi attacks?

Parameterized queries and input validation

Disabling error messages completely

Using only read-only database accounts

Limiting database connection timeouts

11. What is SQL injection (SQLi)?

Inserting malicious SQL code into input fields to manipulate database queries

Encrypting database connections with SSL/TLS protocols

Using SQL statements to authenticate users

Backing up database tables automatically

12. True or False: Input length restrictions alone are sufficient to prevent SQLi.

True

False

13. What is a union-based SQLi attack?

Using UNION SELECT to append attacker-controlled query results

Combining multiple databases into one

Deleting database tables using UNION statements

Merging two SQL servers together

14. Which encoding method helps prevent reflected XSS attacks?

HTML entity encoding of user-supplied output

Base64 encoding of all user input

ROT13 cipher for sensitive data

Gzip compression of responses

15. True or False: DOM-based XSS vulnerabilities exist server-side.

True

False

16. What is the primary purpose of using parameterized queries?

Separate SQL code from user input to prevent injection attacks

Increase database query execution speed

Encrypt all database communications

Automatically backup databases

17. Which of the following is a valid example of a time-based blind SQLi payload?

'; WAITFOR DELAY '00:00:05'--

SELECT * FROM users;

UPDATE users SET admin=1;

DROP TABLE users;

18. Reflected XSS differs from stored XSS in that reflected XSS:

Does not persist; the payload is in the URL or request

Is permanently saved in the database

Only affects the attacker's browser

Requires admin privileges to execute

19. What does XSS (Cross-Site Scripting) allow an attacker to do?

Inject malicious scripts into web pages viewed by other users

Directly access the database backend

Modify the server's operating system

Decrypt SSL/TLS certificates

20. Which input validation technique best prevents SQL injection?

Parameterized queries and prepared statements

Converting input to uppercase

Limiting input length to 10 characters

Logging all database queries

PenTest+ Web Application Attacks SQLi and XSS Quiz

1. Which of the following best describes stored XSS?

2.

What first name or nickname would you like us to use?

2. True or False: XSS vulnerabilities can only occur in the client-side JavaScript code.

3. A web application is vulnerable to SQLi when it concatenates user input directly into SQL queries without ____.

4. Which OWASP mitigation technique involves treating all user input as untrusted?

5. What is the primary risk of reflected XSS in a phishing attack?

6. True or False: Error-based SQLi relies on intentionally triggering database errors to extract data.

7. Which HTTP header can help prevent clickjacking and frame-based XSS?

8. A common SQLi technique that extracts data character-by-character is called:

9. True or False: Content Security Policy (CSP) can help mitigate XSS attacks.

10. What is the primary defense against blind SQLi attacks?

11. What is SQL injection (SQLi)?

12. True or False: Input length restrictions alone are sufficient to prevent SQLi.

13. What is a union-based SQLi attack?

14. Which encoding method helps prevent reflected XSS attacks?

15. True or False: DOM-based XSS vulnerabilities exist server-side.

16. What is the primary purpose of using parameterized queries?

17. Which of the following is a valid example of a time-based blind SQLi payload?

18. Reflected XSS differs from stored XSS in that reflected XSS:

19. What does XSS (Cross-Site Scripting) allow an attacker to do?

20. Which input validation technique best prevents SQL injection?