Practice · OffSec CyberCore Certified

~/offsec-oscc-sec · offsec-oscc-sec_d1_cbad37f7e6e5 ▊

← OffSec CyberCore Certified · practice sheet

offsec-oscc-sec_d1_cbad37f7e6e5 domain/d1 · medium single

An OSWA candidate exploits a web application and obtains the proof.txt value directly through the web UI's administration section rather than through a shell. What evidence must be included in the documentation for this proof?

A A screenshot of the type or cat command output from the file's original location
B Screenshots of Burp Suite (or a web proxy) and the browser showing the web UI on the actual target machine with the proof value visible
C The MD5 hash of the proof value entered into the control panel
D A screenshot proving privilege escalation to root or Administrator was performed

Unlock this exam to join the per-question discussion and vote on questions.

next question →