KEMBAR78
Sample Answer - CODE Hack | PDF
0% found this document useful (0 votes)
6 views1 page

Sample Answer - CODE Hack

The document outlines a vulnerability report template focusing on the lack of HTTPS, which exposes user data to potential attacks. It provides an example of how the vulnerability can be exploited and details the implications of using insecure HTTP connections. Additionally, it includes a marking scheme for assessing errors based on their severity.

Uploaded by

dhruvstarjain7
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
6 views1 page

Sample Answer - CODE Hack

The document outlines a vulnerability report template focusing on the lack of HTTPS, which exposes user data to potential attacks. It provides an example of how the vulnerability can be exploited and details the implications of using insecure HTTP connections. Additionally, it includes a marking scheme for assessing errors based on their severity.

Uploaded by

dhruvstarjain7
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

Vulnerability Report Submission Template

Vulnerability 1 Name: No HTTPS / Insecure HTTP Connection

Explanation:​
The website is accessible over plain http:// instead of enforcing secure
https://. This exposes user data to man-in-the-middle (MITM) attacks and
eavesdropping.

Location / Page Reference:​


Entire site — Accessible via http://example.com

Working Payload / Proof of Concept:​


Open the site in the browser using:​
http://securebank.com → It loads without redirecting to https://.

Explanation of Exploitation Method:​


If users log in or enter any sensitive data over HTTP, attackers on the same
network can intercept the traffic. This makes it easy to steal login credentials or
session cookies.

(The website does not have this vulnerability. This is just an example)

Marking Scheme

●​ Easy Errors: 50 points each​

●​ Medium Errors: 100 points each​

●​ Hard Errors: 200 points each

Points are awarded at the discretion of the organising committee.

You might also like