ISC2 Exam CAP Topic 5 Question 72 Discussion

Actual exam question for ISC2's CAP exam

Question #: 72
Topic #: 5

[All CAP Questions]

Null Byte Injection is an active exploitation technique used to bypass sanity-checking filters in web applications by adding a URL-encoded null byte character to the user-supplied dat

a. Which of the following is a URL-encoded representation of a null byte?

A%01

B%10

C%25

D%00

Show Suggested Answer

Suggested Answer: B

by Fletcher at Aug 28, 2023, 09:53 PM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pansy

8 days ago

I'm not sure, but I think %01 is also a valid representation of a null byte.

upvoted 0 times

...

Billy

10 days ago

I agree with Claudia, %00 is the URL-encoded representation of a null byte.

upvoted 0 times

...

Glenn

11 days ago

Null byte injection, huh? Time to put on my hacker hat. %00 for the win!

upvoted 0 times

...

Annita

12 days ago

Ah, the age-old null byte trick. %00 is the way to go, no doubt about it.

upvoted 0 times

...

Claudia

12 days ago

I think the answer is D) %00.

upvoted 0 times

...

Asuncion

14 days ago

Hmm, a null byte, eh? Gotta love those sneaky little characters. %00 seems like the obvious choice here.

upvoted 0 times

...