A user masquerades as other users, what type of attack was used?

A user masquerades as other users, what type of attack was used?

• A. Cross Site Scripting (XSS)
• B. SQL Injection
• C. Phishing
• D. Replay Attack

Answer: (A)

Masquerading as other users is about impersonating someone inside the system to gain access or perform actions. Cross-site scripting can enable that by stealing a victim’s session token or cookies through a malicious script injected into a trusted site. With a valid session in hand, the attacker can operate as that user within the application, effectively masquerading as them. The other options don’t fit as well: SQL Injection targets the database; phishing is about tricking someone into giving credentials rather than taking over an active session; and a replay attack reuses a previous message rather than taking over a current user session.

Masquerading as other users is about impersonating someone inside the system to gain access or perform actions. Cross-site scripting can enable that by stealing a victim’s session token or cookies through a malicious script injected into a trusted site. With a valid session in hand, the attacker can operate as that user within the application, effectively masquerading as them. The other options don’t fit as well: SQL Injection targets the database; phishing is about tricking someone into giving credentials rather than taking over an active session; and a replay attack reuses a previous message rather than taking over a current user session.