212-89 · Question #96
Tibson works as an incident responder for MNC based in Singapore. He is investigating a web application security incident recently faced by the company. The attack is performed on a MS SQL Server…
The correct answer is A. /exec(\s|\+)+(s|x)p\w+/ix. The regular expression /exec(\s|\+)+(s|x)p\w+/ix is designed to match patterns that resemble SQL injection attempts, specifically targeting MS SQL Server. This expression looks for the use of the exec command followed by one or more spaces or plus signs, and then patterns that…
Question
Tibson works as an incident responder for MNC based in Singapore. He is investigating a web application security incident recently faced by the company. The attack is performed on a MS SQL Server hosted by the company. In the detection and analysis phase, he used regular expressions to analyze and detect SQL meta-characters that led to SQL injection attack. Identify the regular expression used by Tibson to detect SQL injection attack on MS SQL Server.
Options
- A/exec(\s|+)+(s|x)p\w+/ix
- B((..\)|(../))
- C((.|%2E)(.|%2E)(/|%2F|\|%5C))
- D((%3C)|<)((%2F)|/)*(script)((%3E)|>)
How the community answered
(26 responses)- A77% (20)
- B4% (1)
- C15% (4)
- D4% (1)
Explanation
The regular expression /exec(\s|+)+(s|x)p\w+/ix is designed to match patterns that resemble SQL injection attempts, specifically targeting MS SQL Server. This expression looks for the use of the exec command followed by one or more spaces or plus signs, and then patterns that start with sp or xp, which are prefixes commonly used in SQL Server stored procedures and extended stored procedures. These are often targeted in SQL injection attacks to execute malicious SQL statements. The regular expression provided is a tool used by incident responders like Tibson to identify and analyze potential SQL injection attempts by looking for suspicious patterns in SQL
Topics
Community Discussion
No community discussion yet for this question.