IHT 2024 2nd Semester Part 3

What is the primary goal of a basic SQL injection?

• To create new database users

• To inject an 'or' expression that is always true

• To update existing records

• To delete data from the database

What happens when a program concatenates strings to construct a query?

• It speeds up the query process

• It makes the query more secure

• It can lead to SQL injection vulnerabilities

• It automatically sanitizes user inputs

What would be the result of the SQL query if the password input is '' or '1'='1'?

• Returns only the matching user rows

• Returns the whole table

• Returns an error

• Returns no rows

What is Blind SQL Injection?

• A method where the attacker can see the data directly

• A type of injection where results are inferred from responses

• A technique that reveals the entire database

• A fully secure database practice

What does the message 'REGISTER FOUND' indicate in a Blind SQL Injection?

• None of the above

• That the injection returned records

• Successful data deletion

• An error in the database

How can you guess a password using Blind SQL Injection?

• By resetting the user's password

• By injecting the entire password

• By guessing one character at a time

• By requesting the password directly

What is necessary to perform a targeted Blind SQL Injection?

• Knowing the database software

• Knowing the names of the database columns

• Having admin privileges

• Knowing the exact time of data entry

What does the SQL function 'substr' do in the context of SQL injection?

• Extracts a substring from a string

• Replaces parts of strings

• Deletes substrings from the main string

• Converts strings to uppercase

Why is it important to know the column names in Blind SQL Injection?

• To construct precise queries

• To make the database run faster

• To format the output correctly

• To avoid detection by security systems

What role does the 'binary' keyword play in SQL queries used in Blind SQL Injection?

• It doubles the speed of query execution

• It encrypts the communication

• It ensures case-sensitive comparisons

• It converts data into binary format