Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCIH Exam - Topic 7 Question 9 Discussion

Posted by Marjory on Dec 23, 2023 at 01:10 AM

John visits an online shop that stores the IDs and prices of the items to buy in a cookie. After selecting the items that he wants to buy, the attacker changes the price of the item to 1.

Original cookie values:

ItemID1=2

ItemPrice1=900

ItemID2=1

ItemPrice2=200

Modified cookie values:

ItemID1=2

ItemPrice1=1

ItemID2=1

ItemPrice2=1

Now, he clicks the Buy button, and the prices are sent to the server that calculates the total price.

Which of the following hacking techniques is John performing?

Suggested Answer: C

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
34 comments · newest first
AL
Alexis 10 months ago
I don't think it's that simple, there must be more to it.
RO
Robt 11 months ago
Yup, classic example of cookie tampering.
DE
Denae 11 months ago
Wait, can you really change prices like that? Seems risky.
VA
Van 11 months ago
Totally agree, he's manipulating the cookie values!
KR
Kristian 11 months ago
This is definitely cookie poisoning.
HA
Harrison 11 months ago
I thought cross site scripting was more about injecting scripts into web pages, so I'm leaning towards cookie poisoning for this one.
MA
Martha 12 months ago
I remember practicing a question about cookie manipulation, and it was definitely called cookie poisoning.
CO
Corrinne 12 months ago
I'm not entirely sure, but it seems like it could also involve a man-in-the-middle attack since he's intercepting the data somehow.
JU
Jutta 12 months ago
I think this might be related to cookie poisoning since he's modifying the cookie values directly.
JU
Justine 1 year ago
I'm a little confused by all the technical details in this question. Cookie manipulation, item IDs, and price changes - it's a lot to take in. I'll have to read through it carefully and try to break down the key elements.
PR
Providencia 1 year ago
Ah, I see what's going on now. The attacker is manipulating the cookie data to get a lower price. This sounds like a classic cookie poisoning attack. I'm feeling good about selecting the right answer.
CA
Carli 1 year ago
Okay, let me think this through. The attacker is modifying the cookie values to change the item prices, so I'm guessing this is some kind of cookie-based attack. I'll have to weigh the options carefully.
BE
Beckie 1 year ago
Hmm, I'm a bit unsure about this one. The question mentions changing the cookie values, but I'm not sure which specific hacking technique that would be considered.
NI
Nichelle 1 year ago
This seems like a straightforward cookie manipulation attack. I'm pretty confident I can identify the right technique here.
JA
Jani 1 year ago
Hmm, I'm a bit unsure about this one. I'm not super familiar with Stackdriver, so I'll need to read through the options carefully. I'm leaning towards A or D, but I want to make sure I understand the differences between the approaches.
RO
Rodrigo 1 year ago
Hmm, this is a tricky one. I'm not entirely sure when benefits management should continue after a programme closes. I'll need to carefully review the options and think about the underlying principles.
SI
Silvana 1 year ago
Hmm, I'm a bit unsure about this. I know the command is related to Node Manager, but I can't remember the specifics. I'll have to review my notes on that topic before answering.
HA
Haley 1 year ago
Man-in-the-middle attack? Really? That's not even close to what's happening here. This is clearly a cookie poisoning scenario.
GE
Gertude 1 year ago
↳ replying to Haley
Yeah, you're right. It's definitely not a man-in-the-middle attack.
AI
Aide 1 year ago
↳ replying to Haley
I think it's cookie poisoning.
MA
Marshall 1 year ago
↳ replying to Haley
Yeah, it's definitely cookie poisoning. He's changing the prices before sending them to the server.
AN
Annamae 1 year ago
↳ replying to Haley
John is trying to manipulate the prices by changing the values in the cookie.
SH
Shawna 1 year ago
I'm not sure, but it sounds like Cookie poisoning to me too.
TR
Truman 1 year ago
I agree with Mila, changing the prices in the cookie is definitely Cookie poisoning.
YO
Yong 1 year ago
I'd go with option D, cookie poisoning. Changing the prices in the cookie is a pretty clever way to get a good deal, but it's not exactly ethical.
ZO
Zona 1 year ago
↳ replying to Yong
User4: Yup, that's the hacking technique John is using.
RA
Raymon 1 year ago
↳ replying to Yong
User3: I think it's called cookie poisoning, right?
WA
Wava 1 year ago
↳ replying to Yong
User2: Yeah, it's definitely not ethical.
MA
Maxima 1 year ago
↳ replying to Yong
User1: That's sneaky, changing the prices in the cookie like that.
MI
Mila 2 years ago
I think John is performing Cookie poisoning.
NY
Nydia 2 years ago
This sounds like a classic case of cookie poisoning, where the attacker modifies the values in the cookie to manipulate the prices. It's a sneaky way to get a discount!
LI
Lilli 2 years ago
That's sneaky! It's important to always validate and sanitize user input to prevent such attacks.
MA
Maryann 2 years ago
Yeah, I agree. By changing the prices in the cookie, he is manipulating the data sent to the server.
SA
Sabra 2 years ago
I think John is performing a Cookie poisoning attack.
0/2000 characters

Save Cancel