Free OffSec OSWA Exam Questions

Become OffSec Certified with updated OSWA exam questions and correct answers

Page: 1 / 36

Total 180 Questions | Updated On: Jun 16, 2026

Add To Cart

Question 1

Developer says “we sanitize server output.” You suspect a DOM sink. Which minimal probe best surfaces a client-side sink without server reflection?

A :

B :

C :

D :

Answer: C

Question 2

What’s the most reliable exploit?

A :

B :

C :

D :

Answer: D

Question 3

Developer says “we sanitize server output.” You suspect a DOM sink. Which minimal probe best surfaces a client-side sink without server reflection?

A :

B :

C :

D :

Answer: C

Question 4

You need to exploit a CSRF in a stock trading platform. The target action is:The app accepts requests only from Origin: https://trading.local.Which CSRF payload is most likely to bypass defenses?

A :

B :

C :

D :

Answer: D

Question 5

A user has sudoedit rights on /etc/exports via sudoedit /etc/exports.How can you escalate to root?

A : Use sudoedit to add a line that gives root passwordless SSH access.

B : Use sudoedit to replace /etc/exports with a file that is parsed by a privileged process to execute commands (e.g., systemd or startup scripts).

C : Use sudoedit to replace /etc/exports with a file that is parsed by a privileged process to execute commands (e.g., systemd or startup scripts).

D : Use sudoedit to write a file in /etc/cron.d/ by using a symlink trick while the editor runs as root.

Answer: C

Page: 1 / 36

Total 180 Questions | Updated On: Jun 16, 2026

Add To Cart