Ethical hacker jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the…

The correct answer is D. Time-based and boolean-based. Time-based SQL injection may be a sort of inferential injection or blind injection attack. ... this is often why it's also called a blind injection attack. An attacker can reconstruct and make a replacement database structure inside the database. Boolean-based SQL Injection is…

Web Server and Web Application Hacking

Question

Ethical hacker jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. Which two SQL Injection types would give her the results she is looking for?

Options

AOut of band and boolean-based
BTime-based and union-based
Cunion-based and error-based
DTime-based and boolean-based

How the community answered

(42 responses)

A
5% (2)
B
7% (3)
C
17% (7)
D
71% (30)

Explanation

Time-based SQL injection may be a sort of inferential injection or blind injection attack. ... this is often why it's also called a blind injection attack. An attacker can reconstruct and make a replacement database structure inside the database. Boolean-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the appliance to return a special result counting on whether the query returns a real or FALSE result.

Topics

#SQL injection#time-based blind#boolean-based#blind injection

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice