Free OffSec OSWA Exam Questions
Absolute Free OSWA Exam Practice for Comprehensive Preparation
-
OffSec OSWA Exam Questions
-
Provided By: OffSec
- Exam: OffSec Web Assessor (OSWA)
- Certification: Offensive Penetration Testing
-
Total Questions: 180
-
Updated On: Jul 23, 2026
-
Rated: 4.9 |
-
Online Users: 360
-
Question 1
-
* * * * * tar -czf /root/backup.tar /home/user/*Which filenames trigger escalation? (Select all that apply)
Answer: A,B
-
* * * * * tar -czf /root/backup.tar /home/user/*Which filenames trigger escalation? (Select all that apply)
-
Question 2
-
During testing, you find a REST endpoint:GET /api/v1/users/1234/profileAuthenticated as a normal user, you can access your own profile. Changing ID 1234 to 1001 retrieves another user’s data. Which methodology most reliably proves mass exploitation feasibility without detection?
Answer: D
-
During testing, you find a REST endpoint:GET /api/v1/users/1234/profileAuthenticated as a normal user, you can access your own profile. Changing ID 1234 to 1001 retrieves another user’s data. Which methodology most reliably proves mass exploitation feasibility without detection?
-
Question 3
-
A server validates Host headers strictly to cdn.example.com. You want SSRF against localhost.Which technique is MOST effective?
Answer: C
-
A server validates Host headers strictly to cdn.example.com. You want SSRF against localhost.Which technique is MOST effective?
-
Question 4
-
During testing, you find a REST endpoint:GET /api/v1/users/1234/profileAuthenticated as a normal user, you can access your own profile. Changing ID 1234 to 1001 retrieves another user’s data. Which methodology most reliably proves mass exploitation feasibility without detection?
Answer: D
-
During testing, you find a REST endpoint:GET /api/v1/users/1234/profileAuthenticated as a normal user, you can access your own profile. Changing ID 1234 to 1001 retrieves another user’s data. Which methodology most reliably proves mass exploitation feasibility without detection?
-
Question 5
-
A healthcare portal blocks standard CSRF submissions, but accepts GET requests with sensitive parameters. You need to trick a logged-in doctor into issuing a prescription refill.Which payload works best?
Answer: C
-
A healthcare portal blocks standard CSRF submissions, but accepts GET requests with sensitive parameters. You need to trick a logged-in doctor into issuing a prescription refill.Which payload works best?