Correct answer: đ
ā§§. āĻā§āύ āĻĒāĻĻā§āϧāϤāĻŋāϤ⧠āĻšā§āϝāĻžāĻāĻžāϰ āĻāϝāĻŧā§āĻŦāϏāĻžāĻāĻ āĻ
ā§āϝāĻžāĻā§āϏā§āϏ āύāĻŋāϤ⧠āĻĒāĻžāϰā§?
āĻāϤā§āϤāϰ: āĻāĻĒāϰā§āϰ āϏāĻŦāĻā§āϞā§
⧍. OSINT āĻāĻŋ?
āĻāϤā§āϤāϰ: āϏāϰā§āĻŦāĻāύā§āύāĻāĻžāĻŦā§ āĻāĻĒāϞāĻŦā§āϧ āĻā§āϏ āĻĨā§āĻā§ āϤāĻĨā§āϝ āϏāĻāĻā§āϰāĻšā§āϰ āĻāĻāĻāĻŋ āĻĒāĻĻā§āϧāϤāĻŋ
ā§Š. āĻšāĻžāĻāĻŋāĻ āĻāĻŋ?
āĻāϤā§āϤāϰ: SQL āĻāύāĻā§āĻāĻļāύā§āϰ āĻāύā§āϝ āĻŦā§āϝāĻŦāĻšā§āϤ āĻāĻāĻāĻŋ āĻā§āϞ
ā§Ē. āĻšāĻžāĻāĻŋāĻ āĻŦā§āϝāĻŦāĻšāĻžāϰ āĻāϰāĻžāϰ āĻāĻĻā§āĻĻā§āĻļā§āϝ āĻāĻŋ?
āĻāϤā§āϤāϰ: āĻāĻāĻāĻŋ āĻāϝāĻŧā§āĻŦāϏāĻžāĻāĻā§āϰ āĻĄāĻžāĻāĻžāĻŦā§āϏ⧠āϏāĻāϰāĻā§āώāĻŋāϤ āĻā§āĻĒāύ āϤāĻĨā§āϝ āĻ
ā§āϝāĻžāĻā§āϏā§āϏ āĻĒā§āϤā§
ā§Ģ. āĻšāĻžāĻāĻŋāĻ āĻŦā§āϝāĻŦāĻšāĻžāϰ āĻāϰ⧠āĻāϝāĻŧā§āĻŦāϏāĻžāĻāĻāĻā§āϞāĻŋ āĻā§āĻāĻžāĻŦā§ SQLi āĻāĻā§āϰāĻŽāĻŖ āĻĨā§āĻā§ āύāĻŋāĻā§āĻĻā§āϰ āϰāĻā§āώāĻž āĻāϰāϤ⧠āĻĒāĻžāϰā§?
āĻāϤā§āϤāϰ: Input validation and Parameterized queries āĻŽāϤ⧠āϝāĻĨāĻžāϝāĻĨ āύāĻŋāϰāĻžāĻĒāϤā§āϤāĻž āĻŦā§āϝāĻŦāϏā§āĻĨāĻž āĻŦāĻžāϏā§āϤāĻŦāĻžāϝāĻŧāύā§āϰ āĻŽāĻžāϧā§āϝāĻŽā§
6. Find out this target's (professional) email, phone number, and current address via OSINT:
Target: https://www(.)linkedin(.)com/in/carl-abraham-12452b21/ (4 marks)
āĻāϤā§āϤāϰ: https://catalog(.)nyit(.)edu/administration_and_faculty/faculty/#
cabrah04@nyit.edu
(870) 680-8827
Wilson Hall, Room: 424C Jonesboro, Arkansas, United States
ā§. āĻā§āύ āϧāϰāύā§āϰ āĻā§ā§āĻŦ āĻĻā§āϰā§āĻŦāϞāϤāĻž āϏāĻŦāĻā§āϝāĻŧā§ āĻŦāĻŋāĻĒāĻā§āĻāύāĻ?
āĻāϤā§āϤāϰ: SQL Injection
ā§Ž. What is the correct domain of Bangladesh? (4 marks)
āĻāϤā§āϤāϰ: All of them
⧝. What are the username and password of this website: spacefurniture(.)co(.)in (6 marks)
āĻāϤā§āϤāϰ: admin=admin@123
ā§§ā§Ļ. What is the Internal Server Error status code?
āĻāϤā§āϤāϰ: 500
ā§§ā§§. inmakeslh(.)in What type of vulnerability exist in this website? (SQL, XSS or No-Redirect) - 4 marks
āĻāϤā§āϤāϰ: No-Redirect & SQL Injection Both are correct!
⧧⧍. āϰāĻžāĻāύā§āϤāĻŋāĻ āĻāĻā§āĻāĻŋāϤ⧠āύāĻāĻŋāĻŦā§āϞ āĻāϏāϞāĻžāĻŽ āĻā§āύ āĻĻāϞā§āϰ āĻ
āύā§āϏāĻžāϰā§?
āĻāϤā§āϤāϰ: āĻāĻā§āĻžāĻŽā§ āϞā§āĻ (āϏāĻžāĻŦā§āĻ āϏāϰ-āĻāĻž-āϰ⧠āĻĻāϞ)
ā§§ā§Š. āύāĻāĻŋāĻŦā§āϞ āĻāϏāϞāĻžāĻŽ āĻāϰ āĻŦāĻžāĻŦāĻžāϰ āύāĻžāĻŽ āĻāĻŋ? (4 marks)
āĻāϤā§āϤāϰ: āĻŽā§āĻšāĻžāĻŽā§āĻŽāĻĻ āύā§āϰā§āϞ āĻāϏāϞāĻžāĻŽ
ā§§ā§Ē. āϏā§āĻļāύ āĻšāĻžāĻāĻā§āϝāĻžāĻāĻŋāĻāϝāĻŧā§āϰ āĻāĻāĻāĻŋ āĻ
ā§āϝāĻžāĻĄāĻ
āύ āĻāϰ āύāĻžāĻŽ āϞāĻŋāĻā§āύāĨ¤
āĻāϤā§āϤāϰ: No-Redirect
No comments:
Post a Comment