If you were going to break into a database-based website, how would you do it?
Answer / chaitanya
learning to break into your own systems so that you can pen test them yourself. While the exact methods are different for each type of database server and programming language, the easiest attack vector to test for first is an SQL injection technique. For example, if the input fields are not sterilized, just entering a specific set of symbols into a form field may be enough to get back data. Alternatively, depending again on how the site is written, using a specially crafted URL may be enough to get back data as well. Footprinting the server ahead of time can help in this task if it isn’t one you built yourself.
| Is This Answer Correct ? | 4 Yes | 1 No |
What is the CIA triangle?
What is the difference between an HIDS and a NIDS?
How would you find out what a POST code means?
What is the most commonly used computer application?
How would you login to Active Directory from a Linux or Mac box?
What is meant by computer application?
What is SSL and why is it not enough when it comes to encryption?
What is a spooler on a computer?
What do you think of social networking sites such as Facebook and LinkedIn?
What is dora process in DHCP and how it works?
How would you permanently remove the threat of data falling into the wrong hands?
How would you judge if a remote server is running IIS or Apache?