During an assessment, a penetration tester exploits an SQLi vulnerability. Which of the following commands would allow the penetration tester to enumerate password hashes?

Question

Options

• Asqlmap -u www.example.com/?id=1 --search -T user
• Bsqlmap -u www.example.com/?id=1 --dump -D accounts -T users -C cred
• Csqlmap -u www.example.com/?id=1 --tables -D accounts
• Dsqlmap -u www.example.com/?id=1 --schema --current-user --current-db

• A
  9% (5)
• B
  4% (2)
• C
  14% (8)
• D
  73% (41)

Explanation

Wait - the correct answer listed is D, but based on sqlmap functionality, option B is actually the most appropriate command for enumerating password hashes. Option B uses --dump to extract data from a specific database (-D accounts), table (-T users), and column (-C cred), which would retrieve credential/password hash data. However, if D is marked correct by the exam, it may be because --schema reveals the database structure, --current-user identifies the DB user (whose privileges matter for hash access), and --current-db identifies the active database - together forming a reconnaissance step before targeting hashes. That said, this answer appears to be a trick or error in the question, as D does not directly enumerate password hashes.

No community discussion yet for this question.