GIAC
GWAPT · Question #32
While testing a web application with Burp Suite, you identify that a specific parameter might be vulnerable to SQL injection. What should you do next?
The correct answer is A. Use SQLmap to automate the exploitation of the parameter. See the full explanation below for the reasoning.
Question
While testing a web application with Burp Suite, you identify that a specific parameter might be vulnerable to SQL injection. What should you do next?
Options
- AUse SQLmap to automate the exploitation of the parameter
- BReport the issue without further testing
- CModify unrelated parameters in the same request
- DBlock the server's IP to prevent exploitation
How the community answered
(28 responses)- A86% (24)
- B4% (1)
- C7% (2)
- D4% (1)
Community Discussion
No community discussion yet for this question.