Exam 312-50v11 topic 1 question 182 discussion

Guys when you find a mistake and want to post the correct answer, please try to write a voting comment. This will help distinguish the correct answer from the wrong answer in the selection section.

D. Time-based and boolean-based

D. Time-based and boolean-based

Time-based Injection: This type of SQL injection involves introducing a delay in the SQL query's execution to observe if there's a delay in the server's response. By injecting malicious code that causes a delay, the attacker can infer whether a true condition is met or not based on the delay in the server's response. If the response time is significantly different, it can indicate the success of the injected condition. Union-based Injection: Union-based injection involves exploiting SQL queries that use the UNION SQL operator to combine results from multiple SELECT statements. By injecting a crafted UNION query, the attacker can combine their own query results with the original query's results. This can help the attacker retrieve additional data or test conditions based on the structure of the query.

it is time based and boolean based

In an error-based SQLi, the attacker sends SQL queries to the database to cause errors and then monitors error messages displayed by the database server. This lets the attacker obtain information about the structure of the database. In some cases, error-based SQL injection alone is enough for an attacker to enumerate an entire database. In a boolean-based SQL injection, the attacker sends SQL queries to the database, which force the application to return a different result depending on whether the query returns a true or false result. Depending on the result, the content of the HTTP response will change or remain the same. This allows an attacker to know if the result is true or false, even though no data from the database is returned.

D. Time-based and boolean-based

The correct óptimo is D: Time-based and boolean-based

1.-Time delay SQL injection (sometimes called time-based SQL injection) evaluates the time delay that occurs in response to true or false queries sent to the database. A waitfor statement stops the SQL server for a specific amount of time. Based on the response, an attacker will extract information such as connection time to the database as the system administrator or as another user and launch further attack 2.-Boolean-based blind SQL injection (sometimes called inferential SQL Injection) is performed by asking the right questions to the application database. Multiple valid statements evaluated as true or false are supplied in the affected parameter in the HTTP request

Answer is D, time based and boolean based

D is correct

D is correct

Blind/Inferential SQL Injection time-based SQL injection evaluates the time delay that occurs in response to true or false queries sent to the database. Boolean-based blind SQL injection is performed by asking the right questions to the application database. (P.2042-2044)

D.Time-based and boolean-based, is the answer

Answer is D, time based and boolean based

Time and Boolean

Time-based and boolean-based