Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS includes which of the following?
Cross-Site Scripting injects malicious script into a trusted page so the victim ' s browser executes attacker-controlled code. Common XSS outcomes include session or cookie theft, unauthorized actions, and data exposure. Option C (Cookie Stealing) is correct because cookie stealing is a classic XSS impact.
Why the other options are incorrect:
A. Spyware Callback: Spyware Callback is outbound C2 protection. It is not the browser/URL control being tested here.
B. Anonymizers: Anonymizer controls restrict proxy/anonymity services. They do not represent the malicious-content category in this question.
D. IRC Tunneling: IRC tunneling is a specific evasive communication method. The question’s answer is the broader protection control being tested.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit