Web vulnerability scanning in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the tool used for scanning web vulnerabilities.

Cybersecurity

scanner = "[1]"  # Popular open-source web vulnerability scanner

Drag options to blanks, or click blank then click option'

AWireshark

BNmap

CMetasploit

DNikto

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing Nikto with Nmap which is a network scanner.

Nikto is a popular open-source web vulnerability scanner used to detect security issues in web servers.

2fill in blank

medium

Complete the code to specify the type of vulnerability scanning that tests web applications for security flaws.

Cybersecurity

scan_type = "[1]"  # Scanning focused on web apps

Drag options to blanks, or click blank then click option'

AWeb vulnerability scanning

BNetwork scanning

CPort scanning

DMalware scanning

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing network scanning which is broader and not specific to web apps.

Web vulnerability scanning focuses on finding security weaknesses in web applications.

3fill in blank

hard

Fix the error in the code to correctly represent a common vulnerability scanner's output format.

Cybersecurity

report_format = '[1]'  # Format used for detailed vulnerability reports

Drag options to blanks, or click blank then click option'

Ahtml

Bexe

Ctxt

Dbin

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing 'exe' or 'bin' which are not report formats.

Most web vulnerability scanners generate reports in HTML format for easy reading in browsers.

4fill in blank

hard

Fill both blanks to complete the code that filters vulnerabilities by severity and type.

Cybersecurity

filtered_vulns = [v for v in vulnerabilities if v.severity [1] 'High' and v.type [2] 'SQL Injection']

Drag options to blanks, or click blank then click option'

A==

B!=

C>=

D<=

Attempts:

3 left

💡 Hint

Common Mistakes

Using inequality operators which would exclude desired vulnerabilities.

The code filters vulnerabilities where severity is exactly 'High' and type is exactly 'SQL Injection'.

5fill in blank

hard

Fill all three blanks to create a dictionary comprehension that maps vulnerability names to their risk scores if the score is above 7.

Cybersecurity

high_risk = {v.[1]: v.[2] for v in vuln_list if v.[3] > 7}

Drag options to blanks, or click blank then click option'

Aname

Brisk_score

Dseverity

Attempts:

3 left

💡 Hint

Common Mistakes

Using severity instead of risk_score for filtering or values.

This comprehension creates a dictionary with vulnerability names as keys and their risk scores as values, including only those with a risk score greater than 7.