NOTER Quiz

Why is having a weak session secret detrimental to application security?

• It allows the session database to be compromised easily

• It can be brute forced to forge sessions

• It can be brute forced to accelerate

• None of the above

Which of the following is NOT a use case of multithreading?

• Dictionary attacks

• Web servers

• Mass network requests

• List processing

Where is Selenium Oxide most useful?

• When web applications need to use client side JavaScript for an exploitable feature

• When exploitation of an application needs to be quickly automated

• When one knows the target application has good logging and monitoring

• All of the above

What is the best way to implement an account creation flow where the first password has a known format and is relatively easily guessable?

• Don't, it's bad design

• Keep the first password format hidden to all but those that need it

• Tell those that have authorization to change their passwords (but don't force them)

• Don't use account information in the first password

Are User Defined Functions potentially dangerous?

• No, user defined functions are safe

• They are a part of SQL clients, and are thus not necessarily dangerous

• They are a part of SQL clients, and thus safeguards must be taken to prevent attackers from gaining access to SQL user credentials

• They are an optional configuration that must be turned off for fear of exploitation