Crowdly

To reduce user authentication complexity

Which tool can test for directory traversal vulnerabilities?

Nikto

THC Hydra

wfuzz

25%

Metasploit

What is one of the primary causes of web server vulnerabilities?

Default settings and credentials

Excessive server monitoring

Overuse of HTTPS

Lack of strong firewalls

What vulnerability is Heartbleed an example of?

SQL injection

Directory traversal

Command injection

Buffer over-read

What is the primary danger of the Shellshock vulnerability?

Enabling remote code execution through Bash

Allowing directory traversal attacks

Causing denial of service (DoS) attacks

Exposing sensitive session cookies

What type of attacks target services like SSH, FTP, and SMTP?

Brute-force and credential stuffing attacks

Buffer overflow attacks

SQL injection attacks

Cross-site scripting (XSS) attacks

What does a directory traversal attack aim to achieve?

Redirect HTTP traffic to a different domain

Retrieve files outside the web root folder

Exploit server-side request forgery (SSRF) vulnerabilities

Overwhelm server resources

What is a common method used in Denial of Service (DoS) attacks?

SQL injection

Port scanning

Token manipulation

Slowloris attack

What does log auditing help achieve?

Automating software updates

Simplifying file system permissions

Increasing server response time

Detecting unusual patterns indicative of malicious activity

What can reduce the risk of unauthorized directory access?

Disabling outdated SSL protocols

Encrypting backup files

Implementing strict input validation

Using multi-factor authentication