Hacksplaining

SELECT *

FROM users

WHERE email = '[e-mail]'

AND pass = '' or 1=1--' LIMIT 1

This is an example of...

• SQL Injection

• Cross Site Scripting

• Session Fixation

• Broken Access Control

SQL Injection Can Be Used To...

• Extract sensitive information

• Enumerate the authentication details of users registered on a website

• Delete data or drop tables

• Inject further malicious code

SQL Injection is relatively uncommon nowadays.

• True

• False

Programming languages talk to databases through:

• Database Drivers

• Custom API Requests

• Direct Communication

• Quantum Relays

What are parameterized statements? (More than 1 answer!)

• A method for providing SQL statements in a safe, secure manner

• A method for providing SQL statements that is unsafe

• The SQL command is passed separately from the data to be executed

• The SQL command is passed together with the data to be executed

A website that allows users to embed their own Javascript code will be vulnerable to:

(More than 1 possible answer!)

• Cross Site Scripting

• Session Hijacking

• DDOS

• Broken Access Control

A website converts website names to IP addresses using the nslookup command.

On the website, the hacker types into the box "google.com && echo "Hello"

What is this an example of?

• Command Execution

• Cross Site Scripting

• Broken Access Control

• Open Redirects

To lower the chance of remote execution attacks, one should:

• Use older systems that have been tested

• Utilize API calls

• Use SSL certificates

• Use Linux if system calls must be made

In regards to Command Execution attacks, sanitization can involve:

• Checking for escape characters

• Comparing input against known safe characters

• Preventing input for system commands

The best ways to protect against command execution include:

• Avoiding them altogether

• Evaluating for Escape Inputs

• Restricting Permitted Commands

• Code Review

• Running With Restricted Permissions