Free OffSec OSWA Exam Questions

A healthcare portal blocks standard CSRF submissions, but accepts GET requests with sensitive parameters. You need to trick a logged-in doctor into issuing a prescription refill.Which payload works best?

You find:POST /upload{"filename":"invoice.pdf","path":"/users/123/docs/"}Which exploitation demonstrates maximum impact?

You find:POST /upload{"filename":"invoice.pdf","path":"/users/123/docs/"}Which exploitation demonstrates maximum impact?

You gain SELECT access via SQLi on MySQL. You want SUPER privileges.What technique applies?

During a penetration test, you find a reflected XSS in a GET parameter ?q=. The web app sets a HttpOnly session cookie. Which of the following BEST allows you to hijack the victim’s authenticated session?