WAPT 2 - Up to XPATH

What is the main characteristic of in-band SQL injection?

• It uses a separate channel for injecting and retrieving data.

• It exploits vulnerabilities without returning errors to the attacker.

• It uses the same communication channel for both injection and data retrieval.

• It manipulates stored procedures only.

Which of the following SQL clauses is commonly used in UNION-based SQL injection?

• SELECT INTO

• UNION SELECT

• DELETE FROM

• INSERT INTO

What is the defining feature of blind SQL injection?

• The attacker directly views the results of the injected query.

• The database responses are used to infer information indirectly.

• The attack relies solely on error messages.

• It only works with stored procedures.

In boolean-based blind SQL injection, how is information extracted?

• By observing server-side boolean responses like true or false.

• By injecting multiple UNION SELECT queries.

• By accessing error messages from the database.

• By directly reading the database output.

Which method is commonly used in time-based blind SQL injection?

• DELAY queries to measure the server's response time.

• UNION SELECT queries for data extraction.

• Error messages for debugging SQL injections.

• Stored procedure execution to retrieve data.

What type of queries are typically used to extract information in time-based SQL injection?

• Logical operations.

• WAITFOR DELAY commands.

• INSERT commands.

• UPDATE queries.

How can SQL injection lead to remote code execution (RCE)?

• By injecting SQL commands that interact with the file system or operating system.

• By accessing the database directly without executing commands.

• By bypassing authentication alone.

• By exploiting stored procedures to modify data.

Which stored procedure is often exploited for RCE through SQL injection?

• sp_configure

• sp_helpindex

• sp_table_privileges

• sp_addtype

What does SSTI stand for?

• Server-Side Template Injection.

• Server-Side Traffic Interception.

• Secure Session Template Injection.

• Secure Server Token Injection.

Which server-side template engine is commonly vulnerable to SSTI attacks?

• Django Templates

• Jinja2

• ReactJS

• Handlebars