nerdexam
GIAC

GCIH · Question #271

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

The correct answer is B. Absinthe. Absinthe is a GUI-based automated tool specifically built to conduct blind SQL injection attacks and extract data from backend web server databases.

Web Application Attacks & Post-Exploitation

Question

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

Options

  • AFragroute
  • BAbsinthe
  • CStick
  • DADMutate

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    93% (43)
  • C
    4% (2)

Why each option

Absinthe is a GUI-based automated tool specifically built to conduct blind SQL injection attacks and extract data from backend web server databases.

AFragroute

Fragroute is a packet-fragmentation and rewriting tool used to test and evade network intrusion detection systems, unrelated to SQL injection.

BAbsintheCorrect

Absinthe automates the process of blind SQL injection by inferring database content one bit at a time, making it purpose-built for retrieving data from databases through vulnerable web application parameters without visible error output.

CStick

Stick is an IDS stress-testing tool that generates attack signatures to overwhelm or test IDS sensors, not a SQL injection utility.

DADMutate

ADMutate is a shellcode polymorphism engine designed to mutate exploit payloads to bypass signature-based IDS detection, not a database attack tool.

Concept tested: Automated blind SQL injection tool identification

Topics

#SQL injection#Absinthe#automated exploitation#database extraction

Community Discussion

No community discussion yet for this question.

Full GCIH Practice