Free Preparation Discussions
MENU
CompTIA CS0-003 Exam - Topic 3 Question 61 Discussion
Topic #: 3
A security analyst noticed the following entry on a web server log:
Warning: fopen (http://127.0.0.1:16) : failed to open stream:
Connection refused in /hj/var/www/showimage.php on line 7
Which of the following malicious activities was most likely attempted?
The malicious activity that was most likely attempted is SSRF (Server-Side Request Forgery). This is a type of attack that exploits a vulnerable web application to make requests to other resources on behalf of the web server. In this case, the attacker tried to use the fopen function to access the local loopback address (127.0.0.1) on port 16, which could be a service that is not intended to be exposed to the public. The connection was refused, indicating that the port was closed or filtered. Reference: CompTIA CySA+ Study Guide: Exam CS0-003, 3rd Edition, Chapter 2: Software and Application Security, page 66.
Francis
1 day agoLynelle
6 days agoVicky
12 days agoAnnice
17 days agoIluminada
22 days agoZona
27 days agoVincenza
1 month agoNovella
1 month agoPaulina
1 month ago