A security analyst uses Wireshark and applies the display filter http.request.method == "POST" && http contains "password". What is the security risk this filter is attempting to identify?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the filter captures HTTP POST requests containing the string 'password', which could reveal credentials submitted through web forms over unencrypted HTTP — a critical security risk exposing credentials to eavesdroppers. A is wrong because SQL injection typically appears in GET or POST parameters but the filter is specifically looking for the word 'password', not SQL syntax.
Full explanation below image
Full Explanation
B is correct because the filter captures HTTP POST requests containing the string 'password', which could reveal credentials submitted through web forms over unencrypted HTTP — a critical security risk exposing credentials to eavesdroppers. A is wrong because SQL injection typically appears in GET or POST parameters but the filter is specifically looking for the word 'password', not SQL syntax. C is wrong because XSS payloads appear in server responses, not POST request bodies. D is wrong because HTTP response splitting is found in server responses, not client POST requests.