Question

John creates an account and creates a listing for the sale of his home. He uses HTML tags to bold important words.

Kris, an attacker, spots John's listing and notices the bolded words. Kris assumes HTML tags are enabled on the user end and uses this vulnerability to insert her own script, which will send her a copy of the cookie information for any user who looks at the ad.

Which type of attack method is Kris MOST likely using?

answer

Cross-site scripting


Backdoor Trojan


Active session hijacking


RAT

Answer 1

Cross-site scripting

Kris is injecting malicious script into a web page to steal cookies from users who view the ad — a classic XSS attack.