Web Application Security Testing (WAPT) Interview Questions

Web Application Security Testing (WAPT) Interview Questions

HomeLazyHackerWeb Application Security Testing (WAPT) Interview Questions
Web Application Security Testing (WAPT) Interview Questions
ChannelPublish DateThumbnail & View CountDownload Video
Channel AvatarPublish Date not found Thumbnail
0 Views
Let's all create a question dump together

What vulnerabilities do you need to test in the registration form and payment gateway?
What is clickjacking?
How can clickjacking be prevented?
What is CSRF?
How can CSRF be mitigated?
Let's take an example: If a developer implements a CSRF token in a cookie, does this mitigate the CSRF problem?
Is it possible to mitigate CSRF via header? If yes, why, if not, why?
If the data is in JSON format, how do you check for CSRF issue and what are the exploit possibilities?
Where should the CSRF token be implemented and why?
If the client does not want to change the UI or implement the CSRF tokens and headers, what mitigations do you recommend the client take for CSRF?

https://lazyhacker22.blogspot.com/2022/09/WAPTInterviewQuestions.html

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.