answer.
Ask question
Login Signup
Ask question
All categories
  • English
  • Mathematics
  • Social Studies
  • Business
  • History
  • Health
  • Geography
  • Biology
  • Physics
  • Chemistry
  • Computers and Technology
  • Arts
  • World Languages
  • Spanish
  • French
  • German
  • Advanced Placement (AP)
  • SAT
  • Medicine
  • Law
  • Engineering
Usimov [2.4K]
2 years ago
7

Jason, a penetration tester, is testing a web application that he knows is vulnerable to an SQL injection but the results of the

injection are not visible to him. He tried waitfor delay command to check the SQL execution status which confirmed the presence of the SQL injection vulnerability. Which type of SQL injection Jason is attempting on the web application?
Blind SQL injection
Error-based SQL injection
UNION SQL Injection
Simple SQL Injection
Computers and Technology
1 answer:
Mrac [35]2 years ago
6 0

Answer:

Blind SQL injection

Explanation:

  • SQL Injection is a database hacking technique.
  • It uses a series of SQL queries to get access to the Database Management System ( DBMS ).
  • The hacker ( unauthorized user ) tries to find the login credentials of the database system.
  • SQL Injection are of multiple types. One such technique is Blind SQL Injection.
  • Here the attacker is using wait for delay command which implies the attacker is using the time based SQL injection.
  • The time based SQL Injection is " Blind SQL Injection "
  • In this type of SQL Injection, the attacker uses True / False questions on the database and the web application.
  • Here, the attacker asks the True / False questions to the database with some delay in the query and sees the response in the web application. In this way, the attacker tries to hack the database.
  • Ex: The attacker tries to find the database name by using SQL queries with the query meaning to "If the first letter of database name is 'A' wait for 10 secs " next  "If the first letter of database name is 'B' wait for 10 secs " and so on till "If the first letter of database name is 'Z' wait for 10 secs" till finding the whole database name.
  • So, option (a) is correct.
  • Options (b), (c) and (d) are different type of SQL Injections which don't involve wait delay. SO, options (b), (c) , (d) are not the correct options.
You might be interested in
After deploying a large number of wireless laptop computers on the network, Taylor, the IT director at Contoso, Ltd. decides to
LenKa [72]

Answer:

Setting of short lease time for IP addresses in order to enhance quicker access from clients

6 0
2 years ago
Complete the function to replace any period by an exclamation point. Ex: "Hello. I'm Miley. Nice to meet you." becomes:
vodomira [7]

Answer:

Here is the complete function:

void MakeSentenceExcited(char* sentenceText) {  // function that takes the text as parameter and replaces any period by an exclamation point in that text

int size = strlen(sentenceText);  //returns the length of sentenceText string and assigns it to size variable

char * ptr;  // character type pointer ptr

ptr = sentenceText;  // ptr points to the sentenceText string

for (int i=0; i<size; i++){  //iterates through the sentenceText string using i as an index

    if (sentenceText[i]=='.'){  // if the character at i-th index of sentenceText is a period

        sentenceText[i]='!'; } } } //places exclamation mark when it finds a period at i-th index of sentenceText

Explanation:

The program works as follows:

Suppose we have the string:

sentenceText = "Hello. I'm Miley. Nice to meet you."

The MakeSentenceExcited method takes this sentenceText as parameter

int size = strlen(sentenceText) this returns the length of sentenceText

The size of sentenceText is 35 as this string contains 35 characters

size =  35

Then a pointer ptr is declared which is set to point to sentenceText

for (int i=0; i<size; i++) loop works as follows:    

1st iteration:

i=0

i<size is true because i=0 and size = 35 so 0<35

So the body of loop executes:

 if (sentenceText[i]=='.') statement checks :

if (sentenceText[0]=='.')

The first element of sentenceText is H

H is not a period sign so the statement inside if statement does not execute and value of i increments to 1. Now i = 1

2nd iteration:

i=1

i<size is true because i=1 and size = 35 so 1<35

So the body of loop executes:

 if (sentenceText[i]=='.') statement checks :

if (sentenceText[1]=='.')

This is the second element of sentenceText i.e. e

e is not a period sign so the statement inside if statement does not execute and value of i increments to 1. Now i = 2

So at each iteration the if condition checks if the character at i-th index of string sentenceText is a period.

Now lets see a case where the element at i-th index is a period:

6th iteration:

i=5

i<size is true because i=5 and size = 35 so 5<35

So the body of loop executes:

 if (sentenceText[i]=='.') statement checks :

if (sentenceText[5]=='.')

This is the character at 5th index of sentenceText i.e. "."

So the if condition evaluates to true and the statement inside if part executes:

sentenceText[i]='!'; statement becomes:

sentenceText[5]='!'; this means that the character at 5th position of sentenceText string is assigned an exclamation mark.

So from above 6 iterations the result is:

Hello!

This loop continues to execute until all the characters of sentenceText are checked and when the value of i gets greater than or equal to the length of sentenceText then the loop breaks.

The screenshot of the program along with its output is attached.

6 0
2 years ago
A wireless network does not benefit like a wired network does, when it comes to collision reduction. Which device reduces collis
Leviafan [203]

Answer:

Switch

Explanation:

The network switch is an networking hardware also known as a network bridging device used to connect devices on the network together and receives and forward data from source to destination through packet switching.

In order to eliminate or reduce collision within the network, present day wired networks make use of network switches that connects each device to its own port on the switch, making the switch the domain of collision for half duplex links or whereby the link is a full duplex links the collision possibility is completely eliminated.

3 0
2 years ago
The basic components of cartridges and shotshells are similar. Shot pellets and a bullet are examples of which basic component?
Liono4ka [1.6K]
The answer is projectile. Handguns and rifles use a cartridge having a single projectile or bullet. Shotguns use a shot shell comprising either a single bullet or a big number of small projectiles (shot or pellets). Though, the basic components of cartridges and shot shells are alike.
5 0
2 years ago
Diane and Benjamin work at the U.S. office of their company. Through their special mentoring relationship, Diane, a senior membe
balandron [24]

Answer:CO-MENTORING RELATIONSHIP.

Explanation: CO-MENTORING RELATIONSHIP is a type of relationship between two individuals,where both have a unique or Special skill set to offer to the other party.

This is the type of relationship between DAINE AND BENJAMIN,is is a kind of mutually beneficial Relationships as DAINE will offer her greatly improved technical skills to Benjamin who in turn will offer or mentor Daine on streamlining work habits to accomplish reports quickly.

3 0
2 years ago
Other questions:
  • In which of the following situations may you pass on the right
    13·2 answers
  • List three functions that you can perform with a database that you cannot perform with a spreadsheet.
    11·1 answer
  • ______ is a statistic that measures how quickly the staff corrected a network problem after they arrived at the problem site. MT
    9·1 answer
  • Write the definition of a class Telephone. The class has no constructors, one instance variable of type String called number, an
    9·1 answer
  • Write a program that generates 1,000 random integers between 0 and 9 and displays the count for each number. (Hint: Use a list o
    12·1 answer
  • Which of the following could NOT be represented by a boolean variable?
    8·1 answer
  • Which business case is better solved by Artificial Intelligence (AI) than conventional programming
    15·1 answer
  • 1-(50 points) The function sum_n_avgcomputes the sum and the average of three input arguments and relays its results through two
    8·1 answer
  • Write a program to input value of three sides, to check triangle is triangle is possible to form of not​
    11·1 answer
  • A chain of dry-cleaning outlets wants to improve its operations by using data from
    7·1 answer
Add answer
Login
Not registered? Fast signup
Signup
Login Signup
Ask question!