Test
Sin título
Preguntas del test (1)
1
A hacker wants to gain access to a database behind a web site using SQL injection.
(i) Explain the purpose of each of the following injected code used by the hacker:
ORDER BY 1 -- followed by ' ORDER BY 2 --
UNION SELECT table_name FROM user_tables --
UNION SELECT column_name FROM user_tab_columns WHERE table_name ='CLIENTS' --
UNION SELECT carddetails FROM CLIENTS –- A1: The hacker is trying to determine how many columns are contained within the database, so he/she executes the command to test when the application will throw an error. If the application throws an error after say order by 4 that means the database has 3 columns.
- B2: This command is to determine how many tables are within the database.
- C3: This query will give column name, and the list all user tab columns where the table ends with or contains the column named CLIENTS.
- D4: The hacker is querying for list of carddetails from the previous found column CLIENTS
Información
- Descripción
- Test sobre Sin título, creado por Geri Ray el 03/05/2019.
- Autor
- Geri Ray
- Idioma
- English
- Visitas
- 0
- Valoración
- Aún sin valoraciones Valora este test