Practice · OffSec CyberCore Certified

~/offsec-oscc-sec · offsec-oscc-sec_d1_5fca957264b6 ▊

← OffSec CyberCore Certified · practice sheet

offsec-oscc-sec_d1_5fca957264b6 domain/d1 · medium single

You have written a working exploit chain for an OSWE target but it requires the grader to manually paste a token into a second request. According to the exam proof requirements, why will this approach cost you points?

A The PoC script must execute without user interaction and require nothing to be done manually while it runs
B The grader is not permitted to run any PoC scripts at all
C Tokens must always be extracted using a reverse shell, never a script
D You are required to submit a separate script for each vulnerability rather than a single chain

Unlock this exam to join the per-question discussion and vote on questions.

next question →