Question

Which of the following attack-based checks WebInspect cannot do?

(a) cross-site scripting

(b) directory traversal

(c) parameter injection

(d) injecting shell code

The question was posed to me by my school principal while I was bunking the class.

I'm obligated to ask this question of Popular Tools used in Security in division Cyber Laws, Security Tools, Bugs and Vulnerabilities of Cyber Security

Answer 1

Right answer is (d) injecting shell code

Easy explanation: WebInspect can check whether a web server is properly configured or not by attempting for common attacks such as Cross-site scripting, directory traversal, and parameter injection. But it cannot inject malicious shell code in the server.