EC-Council
412-79V10 · Question #42
Christen is a renowned SQL penetration testing specialist in the US. A multinational ecommerce company hired him to check for vulnerabilities in the SQL database. Christen decided to perform SQL…
The correct answer is B. Error-based SQLI. See the full explanation below for the reasoning.
Question
Christen is a renowned SQL penetration testing specialist in the US. A multinational ecommerce company hired him to check for vulnerabilities in the SQL database. Christen decided to perform SQL injection by injecting a malicious query into the e-commerce website which used SQL database to store the products and customers' information. The SQL injection caused an error and displayed additional information about the database schema. Which of the following testing techniques is Christen using?
Options
- AFuzz Testing
- BError-based SQLI
- CUnion Exploitation
- DAutomated Exploitation
How the community answered
(40 responses)- A3% (1)
- B75% (30)
- C15% (6)
- D8% (3)
Community Discussion
No community discussion yet for this question.