URL, HTTP and HTML

Question 1

What are some of the techniques used in obfuscation?

Answer 1

• Username based obfuscation
• %-encoding based obfuscation
• misspelled URL’s
• Homographic URL’s

Question 2

What is username based obfuscation?

Answer 2

A username is before the url to make it look like a website eg:
\cnn.com&breaking_news@10.0.0.1/topstory.html

Question 3

What is %-encoding based obfuscation?

Answer 3

% in a url means the next 2 characters are ASCII eg:

www%2Egoogle%2Ecom is the same as www.google.com

Question 4

What is homographic obfuscation?

Answer 4

On or two words are spelled alike but have a different meaning eg: www.g00gle.com

Question 5

What is obfuscation?

Answer 5

Used to deceive users into visiting a site they may not intend to

Question 6

What is the HTTP options request?

Answer 6

Request for information about the communications options available at the server

Question 7

What is the HTTP get request?

Answer 7

Request to retrieve information resource associated with URI

Question 8

What is the HTTP Head request?

Answer 8

Requests meta information associated with the resource without transferring the resource itself

Question 9

What is the HTTP Post request?

Answer 9

Sends data to the server in order to modify or extend the specified resource eg post to a forum

Question 10

What is the HTTP delete request?

Answer 10

Requests the origin server delete the resource

Question 11

What is the HTTP Trace request?

Answer 11

Diagnostic method, the request is echoed back to the client

Question 12

What is the HTTP connect request?

Answer 12

Sets up a transparent channel through a proxy server

Question 13

What is error 401?

Answer 13

Unauthorised access, need to enter credentials and try again

Question 14

What are the two HTTP authentication schemes?

Answer 14

Basic - uses a base 64 encoded string which is not secure
Digest - sends a string of random data to client as a challenge. Client response with data including password and credentials.

Question 15

What is the purpose of a cookie?

Answer 15

So the server knows information about the client for the next time they send a request

Question 16

What information is contained in a cookie?

Answer 16

• Name
• Value
• Expiration date
• Domain
• Path

Question 17

What are cookies generally used for?

Answer 17

• Access control (single sign on)
• Preferences management
• Tracking user activity
• Maintaining session state

Question 18

How does HTTPS work?

Answer 18

Client and server establish a secure connection and communication takes place over this.

Question 19

What are potential problems with HTTPS?

Answer 19

Man in the middle attacks

Question 20

How does HTML work?

Answer 20

HTML consists of a set of tags attached to text.The tags describe the meaning and how it will be displayed.

Question 21

In HTML how is a close tag displayed?

Answer 21

with a / for eg:

Question 22

What are meta tags in HTML used for?

Answer 22

They are placed in the head of the document and contain information about the document and contain relevant keywords. Search engines often use them

Question 23

What is XML?

Answer 23

Extensible markup language

Question 24

What is the difference between HTML and XML?

Answer 24

• HTML is used to describe how data is displayed

- XML can be used to describe what the data actually means

Question 25

What is XHTML?

Answer 25

Extensible hyper text markup language. It can be mixed with other XML languages.