GCIH · Question #271
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?
The correct answer is B. Absinthe. Absinthe is a GUI-based automated tool specifically built to conduct blind SQL injection attacks and extract data from backend web server databases.
Question
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?
Options
- AFragroute
- BAbsinthe
- CStick
- DADMutate
How the community answered
(46 responses)- A2% (1)
- B93% (43)
- C4% (2)
Why each option
Absinthe is a GUI-based automated tool specifically built to conduct blind SQL injection attacks and extract data from backend web server databases.
Fragroute is a packet-fragmentation and rewriting tool used to test and evade network intrusion detection systems, unrelated to SQL injection.
Absinthe automates the process of blind SQL injection by inferring database content one bit at a time, making it purpose-built for retrieving data from databases through vulnerable web application parameters without visible error output.
Stick is an IDS stress-testing tool that generates attack signatures to overwhelm or test IDS sensors, not a SQL injection utility.
ADMutate is a shellcode polymorphism engine designed to mutate exploit payloads to bypass signature-based IDS detection, not a database attack tool.
Concept tested: Automated blind SQL injection tool identification
Topics
Community Discussion
No community discussion yet for this question.