Register
Question 1
Which HTTP header sent by the browser tells the server the full URL of the page that linked to the current request, and is commonly abused to test Referer-based SSRF or origin validation weaknesses?
Correct Answer:
Referer
Question 2
In Burp Suite, which tool is used to send a single HTTP request repeatedly with modifications, allowing precise manual testing of individual parameters?
Correct Answer:
Repeater
Question 3
A web application appends user input directly to a SQL query: `SELECT * FROM users WHERE id=' '`. Which payload causes the application to return all rows by breaking out of the string context?
Correct Answer:
' OR 1=1--
Question 4
Which SQLMap flag is used to specify the target URL for an injection test?
Correct Answer:
-u
Question 5
A UNION-based SQL injection attack requires that the injected SELECT statement returns the same number of columns as the original query. Which technique is used to determine the correct column count?
Correct Answer:
ORDER BY incrementing
Question 1
Exam overview

About this Exam

Prepare with the HTB CWES Practice Questions - HTB Certified Web Exploitation Specialist (formerly CBBH) Exam practice quiz. This question bank includes 100 questions covering application, attacker, server, injection, and user. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

HTB CWES Practice Questions - HTB Certified Web Exploitation Specialist (formerly CBBH) Exam

This practice set contains 100 questions from the matching question bank and focuses on application, attacker, server, injection, and user. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions

ISC2 Certified in Cybersecurity Practice Exam

0 min

Arizona CNA Certified Nursing Assistant Practice Exam

0 min

Certified Professional Public Buyer (CPPB) Practice Exam

0 min

Certified Specialist Business Intelligence (CSBI) Practice Test

0 min

Certified Specialist In Renal Nutrition (CSR) Practice Exam

0 min

Certified Specialist Physician Practice Management (CSPPM) Practice Exam

0 min