312-50V11 · Question #897
Ethical hacker jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the…
The correct answer is D. Time-based and boolean-based. Time-based SQL injection may be a sort of inferential injection or blind injection attack. … this is often why it’s also called a blind injection attack. An attacker can reconstruct and make a replacement database structure inside the database. Boolean-based SQL Injection is an…
Question
Ethical hacker jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. Which two SQL Injection types would give her the results she is looking for?
Options
- AOut of band and boolean-based
- BTime-based and union-based
- Cunion-based and error-based
- DTime-based and boolean-based
How the community answered
(59 responses)- A5% (3)
- B15% (9)
- C8% (5)
- D71% (42)
Explanation
Time-based SQL injection may be a sort of inferential injection or blind injection attack. … this is often why it’s also called a blind injection attack. An attacker can reconstruct and make a replacement database structure inside the database. Boolean-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the appliance to return a special result counting on whether the query returns a real or FALSE result.
Topics
Community Discussion
No community discussion yet for this question.