Web Application SQL Injection Attacks GWAPT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A development team is remediating a SQL injection vulnerability in a Java application. The team wants to use a defense that is considered the most effective against SQL injection. Which coding practice should the team adopt?

   • AUse PreparedStatement with parameterized queries
   • BUse a stored procedure that concatenates input
   • CUse an ORM framework without parameterization
   • DUse string concatenation with input escaping
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A tester is exploiting a SQL injection in a MySQL application. The tester has confirmed the injection point and wants to read the contents of a file on the database server. The application's database user has FILE privilege. Which payload should the tester use?

   • AUNION SELECT @@datadir, NULL --
   • BUNION SELECT sys_exec('/etc/passwd'), NULL --
   • CUNION SELECT INTO OUTFILE '/etc/passwd' --
   • DUNION SELECT LOAD_FILE('/etc/passwd'), NULL --
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is exploiting a SQL injection vulnerability in a product listing page. The tester wants to extract the contents of the 'users' table. The tester has already confirmed the injection point and the number of columns. Which SQL injection technique should the tester use to extract the data?

   • ATime-based blind injection to infer data using delays
   • BUNION-based injection to combine the original query with a query on the users table
   • CError-based injection to extract data via error messages
   • DBoolean-based blind injection to infer data character by character
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team is reviewing a web application that uses a database account with DBA privileges. The application has a SQL injection vulnerability in a product ID parameter. The team wants to implement a defense that reduces the impact of a successful injection while maintaining functionality. Which control should the team implement?

   • AChange the database account to use least privilege, granting only the necessary permissions
   • BAdd a web application firewall (WAF) to block SQL injection attempts
   • CDisable database error messages to prevent information disclosure
   • DUse input validation to block special characters in the product ID
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team is reviewing a web application that connects to a database using a highly privileged account. The application has multiple SQL injection vulnerabilities. Which defense-in-depth measure should the team implement to reduce the impact of a successful SQL injection attack?

   • ADisable all database error messages to prevent information disclosure
   • BUse input validation to block all special characters in user input
   • CEncrypt all data in the database to prevent unauthorized reading
   • DApply the principle of least privilege by using a database account with only the necessary permissions
   Reveal Solution Discussion Select an answer first