Web Application SQL Injection Attacks GWAPT Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which SQL injection technique is used to extract data from other database tables by combining the results of two queries?

   • ATime-based blind SQL injection
   • BUnion-based SQL injection
   • CError-based SQL injection
   • DBoolean-based blind SQL injection
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A penetration tester is testing a web application that uses a search feature. The tester submits the payload ' AND SLEEP(5) -- and observes that the response takes 5 seconds longer than normal. Which detection technique is the tester using, and what does this result confirm?

   • ABoolean-based detection; the result confirms the injection point is in a numeric parameter
   • BTime-based detection; the result confirms the injection point is vulnerable
   • CUnion-based detection; the result confirms the number of columns in the query
   • DError-based detection; the result confirms the database is vulnerable to injection
   Reveal Solution Discussion Select an answer first
3. 28expert · hard

   A penetration tester is exploiting a SQL injection vulnerability in a web application. The tester wants to extract the contents of the 'users' table, but the application only displays the first row of the result set. The tester has confirmed the injection point and the number of columns. Which technique should the tester use to extract all rows from the 'users' table?

   • AUse boolean-based blind injection to extract each row's data
   • BUse error-based injection to extract each row's data
   • CUse UNION-based injection with the LIMIT clause to iterate through rows
   • DUse time-based blind injection to extract each row's data
   Reveal Solution Discussion Select an answer first