100% Free OffSec OSWA Practice Test Questions and Answers 2026

Start Learning with the Latest and Real 100% Free OffSec OSWA Exam Questions

Page: 1 / 36

Total 180 Questions | Updated On: May 21, 2026

Add To Cart

Question 1

You gain SELECT access via SQLi on MySQL. You want SUPER privileges.What technique applies?

A : Exploit INTO OUTFILE to drop reverse shell

B : Abuse SET GLOBAL general_log_file + write webshell

C : Elevate using UNION SELECT grant_option_priv

D : Modify mysql.user directly with injected UPDATE

Answer: D

Question 2

What’s the most reliable exploit?

A :

B :

C :

D :

Answer: D

Question 3

A site implements CSRF protection via double-submit cookies. You notice that SameSite is set to Lax. Which crafted request bypasses protection?

A :

B :

C :

D : Both B and C

Answer: D

Question 4

A server validates Host headers strictly to cdn.example.com. You want SSRF against localhost.Which technique is MOST effective?

A : Use 127.0.0.1 directly

B : Use localhost.example.co

C : Use a DNS rebinding domain that resolves to 127.0.0.1 after initial validation

D : Use %2elocalhost encoding

Answer: C

Question 5

* * * * * tar -czf /root/backup.tar /home/user/*Which filenames trigger escalation? (Select all that apply)

A : --checkpoint=1

B : --checkpoint-action=exec=sh shell.sh

C : normal.txt

D : ../../etc/passwd

E : ; bash

Answer: A,B

Page: 1 / 36

Total 180 Questions | Updated On: May 21, 2026

Add To Cart