1. Diff Between CSRF and SSRF. 2. Types of XSS 3. DOM 4. XSS 5. IDOR

Question

Accepted Answer

CSRF is a type of attack where unauthorized commands are transmitted from a user that the web application trusts. SSRF is a type of attack where an attacker can send a crafted request from a vulnerable web application.

CSRF stands for Cross-Site Request Forgery, while SSRF stands for Server-Side Request Forgery.
CSRF involves tricking a user into making a request they did not intend to, while SSRF involves an attacker sending a crafted request from a vulnerable web application.
Types of XSS include Stored XSS, Reflected XSS, and DOM-based XSS.
DOM stands for Document Object Model, which represents the structure of a web page as a tree of objects.
XSS stands for Cross-Site Scripting, a type of vulnerability where attackers inject malicious scripts into web pages viewed by other users.
IDOR stands for Insecure Direct Object Reference, a vulnerability where an attacker can access unauthorized data by manipulating object references.

1. Diff Between CSRF and SSRF. 2. Types of XSS 3. DOM 4. XSS 5. IDOR

Popular interview questions of Vapt Engineer