Owasp top 10 vulnerabilities, impact and their mitigations.
Diffrence beween get and POST method.
Is it safe to send data in get method.
Diffrence beween encoding, hashing and encryption.
How you can confirm that string either encoded hashed or encrypted by looking at
it.
How hashes can be cracked.
What is rainbow table.
What is salted hash.
SQL injection types, mitigation, exploit scenarios, what most you can do with sql
injection, is it possible to perform rce using sql injection, simple manual
payloads for sql injection ex - payload to enumerate columns
What is the root cause of SQL injection.
Sql Map and it's commands.
Example of parameterized query, what exactly hapening in backend so that it prevent
SQL injection.
How will you test for blind sql injection.
If there is no diffrence between the responce for diffrent payloads for SQL
injection, what will be your approach to test it further.
Xss and its types, mitigation, what most you can do by XSS.
What will be severity of XSS on login page and why.
Explain DOM based XSS and how will you exploit it.
SSRF and its mitigation and impact,
Payload for SSRF and if input validation implemented what payload will you use.
What is burp collaborator and how it can be used to test SSRF.
how port scanning can be performed by SSRF.
XXE its mutigation and impact, what is the way to exploit XXE.
Is it possible to perform XXE on Json request.
What is template injection.
CSRF and it's mitigation.
is it safe to implement CSRF token is in cookie.
Java deserialization impqct and mitigation.
HTTP cookie flags and its significance.
CORS vulnerability.
Namp scanning techniques.
By default how many and which ports Nmap will scan.
What is diffrence between Steath scan and connect scan.
Nmap command -sS -Pn -sC and its meaning.
What is CLRF injection.
What is diffrence between Privilege escalation and IDOR.
what all things you will test on file upload fuctionality.
How will you bypass file extension validation.
What is CSV injection it's impact and mitigation.
Any 5 ports and services running on them.
How SSL works.
What is Digital Signeture and how it works.
What all thing you will check in manifest file for mobile appsec.
What are vulnerable permissions and why.
What is shared preferences.
What is SSL pining and how this can be bypassed.
Oauth token and its vulnerabilities.
JWT token and its vulnerabilities.
What is BeefXSS framework
How will you exploit XSS in real life scenario.
How will you find SQL injection if there is no change in content lenghth and there
is no time delay.
What is Dom based xss and it's payloads
Forgot password functionality test cases
If you found Xss on login page what will the severity and why? How will you exploit
XSS on login page.
How to exploit Self xss
Will implementation of CSP mitigate the Clickjacking.
What are session related attacks. Session Fixasation , hyjacking ?
What are mitigations for CSRF?
What is same site cookie?
What is CORS and it's mitigation?
LFI & RFI and it's mitigation ?
What is your approach to test Thick client application?
Can you intercept Thick client traffic without Echo Mirage using Java Console or
Burp Suite ?
What is referer header and will it mitigate CSRF?
