If you were going to break into a database-based website, how would you do it?
Answer / chaitanya
learning to break into your own systems so that you can pen test them yourself. While the exact methods are different for each type of database server and programming language, the easiest attack vector to test for first is an SQL injection technique. For example, if the input fields are not sterilized, just entering a specific set of symbols into a form field may be enough to get back data. Alternatively, depending again on how the site is written, using a specially crafted URL may be enough to get back data as well. Footprinting the server ahead of time can help in this task if it isn’t one you built yourself.
| Is This Answer Correct ? | 4 Yes | 1 No |
How would you permanently remove the threat of data falling into the wrong hands?
What is a driver in computer?
What is the difference between Information Protection and Information Assurance?
Why would you bring in an outside contractor to perform a penetration test?
What is data source in computer?
How would you login to Active Directory from a Linux or Mac box?
What is data protection in transit vs data protection at rest?
You are an employee for a tech department in a non-management position. A high-level executive demands that you break protocol and allow him to use his home laptop at work. What do you do?
What’s the difference between a White Box test and a Black Box test?
A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?
You find out that there is an active problem on your network. You can fix it, but it is out of your jurisdiction. What do you do?
What is the difference between a vulnerability and an exploit?