Attempting an injection attack on a web server based on responses to True/False Questio n:s is called which of the following?

Question

Options

• ACompound SQLi
• BBlind SQLi
• CClassic SQLi
• DDMS-specific SQLi

• A
  6% (2)
• B
  90% (28)
• D
  3% (1)

Explanation

Blind SQL Injection Explained

Blind SQLi (Option B) is correct because this attack technique involves sending queries to a database and inferring information based on the application's true/false (boolean-based) or time-delay responses - the attacker never directly sees the query output, hence "blind." The attacker asks the database yes/no questions (e.g., "Is the first character of the password 'A'?") and pieces together data from how the server responds.

Why the distractors are wrong:

• A. Compound SQLi is not a standard SQLi classification - it's a fabricated term used as a distractor.
• C. Classic SQLi (also called In-Band SQLi) involves the attacker directly receiving visible database output in the application's response, making it the opposite of blind.
• D. DBMS-specific SQLi refers to attacks that exploit vulnerabilities unique to a particular database management system (e.g., MySQL, MSSQL), not the true/false response method.

Memory Tip: Think of "Blind" like a blindfolded person playing "20 Questions" - they can't see the answers directly, but they gather information through Yes/No responses, just like Blind SQLi gathers data through True/False server reactions.

No community discussion yet for this question.