GICSP Web TestEngine Demo

Q9 Single choice

An attacker crafts an email that will send a user to the following site if they click a link in the message.

What else is necessary for this type of attack to work? hmi.giac.org/disconnect?sensor=812

A
The attacker must obtain a session cookie from an authorized HMI user
B
The user clicking the link must be an administrator on the network
C
The user must be authenticated to the HMI interface before clicking the link
D
The attacker must enclose the URL parameter with <script> tags to run the code

GICSP Web TestEngine demo