Advanced SQL Injection (SQLi) WAHS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A tester is assessing a web application that suppresses all output and does not show timing differences due to a very fast database. However, the database server can make DNS requests. Which technique should the tester use to extract data?

   • ATime-based blind SQLi with SLEEP
   • BError-based SQLi to trigger verbose errors
   • CBoolean-based blind SQLi with binary search
   • DOut-of-band SQLi using DNS exfiltration
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security consultant is testing a web application that is heavily firewalled and returns no output or timing differences for any SQL injection attempts. The consultant has control of a domain name and can monitor DNS queries. Which technique should the consultant use to exfiltrate data from the database?

   • AOut-of-band SQL injection that triggers DNS queries to the consultant's domain
   • BUnion-based SQL injection to display data in the HTTP response
   • CTime-based blind SQL injection with long delays
   • DBoolean-based blind SQL injection with binary search
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following best describes the impact of a successful SQL injection attack?

   • AIt only affects the performance of the database server
   • BIt is limited to read-only access to the database
   • CIt only affects the web server, not the database
   • DIt can lead to unauthorized data disclosure, data modification, and in some cases, complete database compromise
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A tester is assessing a web application that uses a MySQL database. The application filters out single quotes and the words 'AND', 'OR', 'SELECT', and 'UNION'. The tester suspects time-based blind SQLi. Which payload is most likely to work?

   • A1 && SLEEP(5)
   • B1; SELECT SLEEP(5)
   • C1 AND SLEEP(5)
   • D1 OR SLEEP(5)
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In boolean-based blind SQL injection, how does an attacker infer information from the database?

   • ABy reading error messages that contain data
   • BBy using UNION queries to display data directly on the page
   • CBy measuring the time it takes for the database to respond
   • DBy observing differences in the application's response between true and false conditions
   Reveal Solution Discussion Select an answer first