Hacking Web Applications
4 practice questions under this official exam objective (312-50v12, 312-50v13) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Exploiting XSS with HTTPOnly Cookies
This question addresses the limitations of stealing session cookies via Cross-Site Scripting (XSS) when the HTTPOnly flag is enabled. It establishes t
How to Confirm XSS When CSP Allows Only Same-Domain Scripts?
This question tests how to validate an XSS finding when a strict Content Security Policy blocks inline and external scripts but permits same-origin so
Watering Hole Attack Identification
This question examines the Watering Hole attack technique where attackers compromise websites frequented by a specific target group to deliver malware
Exploiting XSS with HTTPOnly Cookies via HTML Encoding
This question examines how to exploit Cross-Site Scripting (XSS) when HTTPOnly flags prevent direct cookie access, focusing on input sanitization bypa