Cyber Avebgers #BeatTheBug - S7 - Cross Site Scripting

XSS is:

• Injection of commands

• Injection parameters

• Injection of scripts

• All of the above

Which of the following languages are associated with cross-site scripting? [Multiple Choice]

• HTML

• SQL

• XSLT

• JavaScript

Which attack can execute scripts in the user’s browser and is capable of hijacking user sessions, defacing websites or redirecting the user to malicious sites?

• SQL Injection

• Malware Uploading

• Man in the middle

• Cross site scripting

<script>document.write("Site is at: " + document.location.href + "."); </script>

This may lead to:

• All types of XSS

• Stored XSS

• Reflected XSS

• DOM based XSS

XSS can be exploited by tampering parameters in GET request

• TRUE

• FALSE

Choose the right options to mitigate XSS Vulnerability. [Multiple Choice]

• Context based encoding untrusted input

• HTML Encoding untrusted input

• Sanitizing user input

• None of the above