Q1. SQL Injection exploits:
Q2. Which tool is widely used for port scanning?
Q3. Which OWASP issue is about improper user session handling?
Q4. Which Burp Suite feature allows manual request manipulation?
Q5. A JWT with alg: none means:
Q6. Insecure Direct Object Reference (IDOR) occurs when:
Q7. Which payload bypasses XSS filters most likely?
Q8. Which OWASP Top 10 issue matches this? POST /transfer amount=1000&to=123
Q9. You run Nmap with the command: nmap -sV -p 80,443 192.168.1.10 What does -sV do?
Q10. An app uses: eval($_GET['data']); You send: ?data=system('id'); The server executes the command. What vulnerability is this?
