Web Application Attacks and SQL Injection ECSS Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A penetration tester is writing a report for a web application assessment. The tester found a SQL injection vulnerability in a search parameter. The client wants to know the business impact. Which of the following is the most important factor to include in the report?

   • AThe recommended remediation steps.
   • BThe CVSS score of the vulnerability.
   • CThe exact payload used to exploit the vulnerability.
   • DThe potential impact on confidentiality, integrity, and availability of the data.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A penetration tester is conducting a web application test. The tester has completed reconnaissance and scanning and has identified a potential SQL injection in the login form. According to a structured penetration testing methodology, what should the tester do next?

   • ARun a vulnerability scanner to confirm the SQL injection.
   • BPerform additional reconnaissance to map the network.
   • CExploit the SQL injection to confirm the vulnerability and extract data.
   • DImmediately write the final report and include the potential SQL injection.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A penetration tester is using sqlmap to automate SQL injection testing on a web application. The tester has identified a parameter that appears to be injectable. Which sqlmap option should the tester use to retrieve the names of all databases?

   • A--dbs
   • B--dump
   • C--current-db
   • D--tables
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does improper input validation lead to injection attacks?

   • AIt causes the application to crash, leading to a denial of service.
   • BIt prevents the application from logging user activity.
   • CIt encrypts user input, making it harder for the application to process.
   • DIt allows an attacker to submit data that is interpreted as code by the application.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A penetration tester is assessing a legacy web application that uses string concatenation to build SQL queries. The tester submits the following payload in the username field of the login form: ' OR '1'='1' -- . The login succeeds and grants access to an administrative account. Which of the following is the most likely reason the attack succeeded?

   • AThe application uses an ORM that maps the username field to a database column without escaping.
   • BThe application does not validate the input length or character set before using it in the query.
   • CThe application concatenates the user-supplied username directly into the SQL query without parameterization.
   • DThe application uses a stored procedure that accepts the username as a parameter without validating it.
   Reveal Solution Discussion Select an answer first