AFs _ M15 Challenge Submission File

docx

School

University of Texas, San Antonio *

*We aren’t endorsed by this school

Course

UTSA-VIRT-

Subject

Information Systems

Date

Dec 6, 2023

Type

docx

Pages

Uploaded by AmbassadorIbex3880

- Cybersecurity Module 15 Challenge Submission File Testing Web Applications for Vulnerabilities Make a copy of this document to work in, and then respond to each question below the prompt. Save and submit this completed file as your Challenge deliverable. Web Application 1: Your Wish is My Command Injection Provide a screenshot confirming that you successfully completed this exploit: 127.0.0.1 && cat ../../../../../etc/passwd

127.0.0.1 && cat ../../../../../etc/hosts

Write two or three sentences outlining mitigation strategies for this vulnerability: Restrict the website server database from being able to access other parts of the database, especially where sensitive files are concerned. Have a list of approved inputs that the database can validate user inputs against. Web Application 2: A Brute Force to Be Reckoned With Provide a screenshot confirming that you successfully completed this exploit:

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Write two or three sentences outlining mitigation strategies for this vulnerability: Users should create strong passwords using special characters, upper and lowercase letters, and numbers. Two-Factor authentication could also be required. Web Application 3: Where's the BeEF? Provide a screenshot confirming that you successfully completed this exploit: Fake Notification Bar

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Write two or three sentences outlining mitigation strategies for this vulnerability: Make sure the application is validating all input data and only allowlisted data is passed through the system. © 2023 edX Boot Camps LLC. Confidential and Proprietary. All Rights Reserved.

AFs _ M15 Challenge Submission File

Related Documents