Question: During a black box assessment on a web-based application, a penetration tester is provided only with a URL to a login page. The following is

During a black box assessment on a web-based application, a penetration tester is provided only with a URL to a login page. The following is the code and output:

import requests

from BeautifulSoup import BeautifulSoup

request = requests.get (\"https://www.willpanek.com/admin\") respHeaders, respBody = request [0], request [1]

if respHeader.statuscode = 200:

soup = BeautifulSoup (respBody)

soup = soup.FindAll (\"div\", {\"type\": \"hidden\"}) print respHeader.StatusCode, StatusMessage

else:

print respHeader.StatusCode, StatusMessage Output: 200 OK

What is the penetration tester trying to do?

A. Analyze the HTTP response code.

B. Horizontally escalate privileges.

C. Scrape the page for hidden fields.

D. Search for HTTP headers.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!