Q. What query would be sent to the database in a successful Boolean SQL injection attack with the input '52019' OR 1=1;--?

View solution

Q. What does an attacker infer if the web application returns a page with no results after providing input '52019' AND 1=2;--?

View solution

Q. Why is it difficult to distinguish between a well-defended application and a successful Boolean SQL injection attack with limited visibility into the application?

View solution

Q. What is the significance of blind SQL injection attacks in scenarios where the attacker cannot directly view the results?

View solution

Q. How do penetration testers assess susceptibility to blind SQL injection attacks using timing-based methods?

View solution

Q. What database platform feature is utilized in a timing-based attack, where an attacker instructs the database to wait for a specified duration?

View solution

Q. How does an attacker verify if an application is vulnerable to timing-based attacks using the account ID field?

View solution

Q. What might an attacker aim to extract from a database using a timing-based attack if the database contains an unencrypted field named Password?

View solution

Q. What is the purpose of code injection attacks in general?

View solution

Q. Besides SQL injection, what is another example of a code injection attack?

View solution

Q. In what scenarios might code injection attacks occur?

View solution

Q. What danger is associated with application code reaching back to the operating system to execute commands?

View solution

Q. What command might an attacker supply in a command injection attack to delete a directory on a Linux system?

View solution

Q. How does the ampersand in the command 'mkdir /home/students/mchapple & rm -rf home' affect its execution?

View solution

Q. What protocol is susceptible to LDAP injection attacks, similar to SQL injection attacks on databases?

View solution

Q. What is the primary goal of LDAP injection attacks?

View solution

Q. What authentication technique is described as knowledge-based and commonly used but easily defeated?

View solution

Q. In password authentication, what happens if an attacker learns a user's password?

View solution

Q. What is a potential way for an attacker to learn a user's password through a social engineering attack?

View solution

Q. In addition to social engineering attacks, what other method might an attacker use to discover a user's password?

View solution