Question: During a black box assessment on a web-based application, a penetration tester is provided only with a URL to a login page. The following is
import requests
from BeautifulSoup import BeautifulSoup
request = requests.get (\"https://www.willpanek.com/admin\") respHeaders, respBody = request [0], request [1]
if respHeader.statuscode = 200:
soup = BeautifulSoup (respBody)
soup = soup.FindAll (\"div\", {\"type\": \"hidden\"}) print respHeader.StatusCode, StatusMessage
else:
print respHeader.StatusCode, StatusMessage Output: 200 OK
What is the penetration tester trying to do?
A. Analyze the HTTP response code.
B. Horizontally escalate privileges.
C. Scrape the page for hidden fields.
D. Search for HTTP headers.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
