You want to enumerate hidden admin panels on https://corp.example/ while avoiding common noise. Requirements:

Ignore responses with status codes 302 and 403.

Match only responses containing “Admin” or “Control Panel” (case-insensitive).

Randomize User-Agent each request from ua.txt.

Throttle requests to bypass rate-limiting.

Which ffuf command lines satisfy all requirements? (Select all that apply)

You find:

POST /upload

{"filename":"invoice.pdf","path":"/users/123/docs/"}

Which exploitation demonstrates maximum impact?

Developer says “we sanitize server output.” You suspect a DOM sink. Which minimal probe best surfaces a client-side sink without server reflection?

A site implements CSRF protection via double-submit cookies. You notice that SameSite is set to Lax. Which crafted request bypasses protection?

* * * * * tar -czf /root/backup.tar /home/user/*

Which filenames trigger escalation? (Select all that apply)