312-50V12 · Question #200
During an attempt to perform an SQL injection attack, a certified ethical hacker is focusing on the identification of database engine type by generating an ODBC error. The ethical hacker, after inject
The correct answer is A. Utilize a blind injection technique that uses time delays or error signatures to extract information. When direct error-based SQL injection fails to reveal database information due to generic error messages, a certified ethical hacker should next employ blind SQL injection techniques.
Question
Options
- AUtilize a blind injection technique that uses time delays or error signatures to extract information
- BTry to insert a string value where a number is expected in the input field
- CAttempt to compromise the system through OS-level command shell execution
- DUse the UNION operator to combine the result sets of two or more SELECT statements
How the community answered
(31 responses)- A74% (23)
- B13% (4)
- C10% (3)
- D3% (1)
Why each option
When direct error-based SQL injection fails to reveal database information due to generic error messages, a certified ethical hacker should next employ blind SQL injection techniques.
Blind SQL injection, such as time-based or boolean-based methods, is designed to infer information about the underlying database when direct error messages or query results are suppressed. By observing subtle changes in the application's behavior, like response times or conditional outputs, an attacker can extract details about the database without direct disclosure.
Inserting a string where a number is expected is a common initial technique to trigger database errors; however, the question states this approach already resulted in a generic, uninformative error message.
OS-level command shell execution is an advanced post-exploitation step to gain deeper system access, not an initial reconnaissance technique for identifying database engine type.
UNION-based injection is used to extract data directly by combining query results, but it relies on the application displaying the output, which is unlikely when detailed error messages are already suppressed.
Concept tested: Blind SQL injection reconnaissance
Source: https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05-SQL_Injection
Topics
Community Discussion
No community discussion yet for this question.