Advanced SQL Injection (SQLi) WAHS Practice Questions (Page 9)

Questions 41–42

1. 41expert · hard

   A tester is assessing a web application that suppresses all output and timing differences are unreliable due to network jitter. The database is Oracle and has outbound network access. The tester wants to exfiltrate data. Which technique is most appropriate?

   • AUse DBMS_LOCK.SLEEP(5) for time-based exfiltration.
   • BUse UTL_HTTP to send an HTTP request to an attacker-controlled server.
   • CUse UNION-based injection to display data in the response.
   • DUse error-based injection to trigger ORA- errors.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A penetration tester is testing a web application that returns the same HTTP status code and body for all requests, regardless of the query result. The tester has confirmed that SQL injection is possible but cannot observe any output differences. Which technique should the tester use to extract the current database name?

   • AUnion-based injection to display the database name
   • BTime-based blind injection using conditional delays
   • CBoolean-based blind injection with binary search
   • DError-based injection to trigger a database error
   Reveal Solution Discussion Select an answer first