Web Application SQL Injection Attacks GWAPT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A penetration tester is assessing a web application that uses a search feature. The tester submits the string ' OR '1'='1 in the search box and receives a database error revealing the SQL query structure. Which manual detection technique is the tester using, and what is the most likely immediate next step?

   • AError-based detection; next, use the error output to craft a UNION-based query to extract data
   • BBoolean-based detection; next, submit a payload that forces a true and a false condition to compare responses
   • CUnion-based detection; next, enumerate the number of columns using ORDER BY
   • DTime-based detection; next, wait for a delay to confirm the injection point
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which manual SQL injection detection technique relies on causing a measurable delay in the database's response to infer information?

   • AError-based SQL injection
   • BUnion-based SQL injection
   • CBoolean-based blind SQL injection
   • DTime-based blind SQL injection
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A penetration tester is testing a web application that returns different page content depending on whether a SQL condition is true or false. The tester wants to confirm a SQL injection vulnerability in a numeric parameter. Which manual detection technique should the tester use?

   • ASubmit ' AND 1=1 and ' AND 1=2 and compare the responses
   • BSubmit a single quote and look for a database error
   • CSubmit ' AND SLEEP(5) and measure the response time
   • DSubmit ' UNION SELECT NULL and look for extra columns
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common injection point for SQL injection attacks in a web application?

   • AThe database server's error log
   • BThe application's compiled binary code
   • CHTTP request headers such as the User-Agent or Referer header
   • DThe web server's configuration file
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A development team is fixing a SQL injection vulnerability in a legacy PHP application. The vulnerable code concatenates user input directly into a SQL query. The team wants to implement a defense that is effective and minimizes changes to the existing codebase. Which remediation should the team apply?

   • AAdd a web application firewall (WAF) rule to block common SQL injection patterns
   • BUse prepared statements with parameterized queries for all database interactions
   • CDisable error messages to hide database errors from users
   • DEscape all user input with a generic escaping function before concatenating into queries
   Reveal Solution Discussion Select an answer first