If you were going to break into a database-based website, how would you do it?
Answer / chaitanya
learning to break into your own systems so that you can pen test them yourself. While the exact methods are different for each type of database server and programming language, the easiest attack vector to test for first is an SQL injection technique. For example, if the input fields are not sterilized, just entering a specific set of symbols into a form field may be enough to get back data. Alternatively, depending again on how the site is written, using a specially crafted URL may be enough to get back data as well. Footprinting the server ahead of time can help in this task if it isn’t one you built yourself.
| Is This Answer Correct ? | 4 Yes | 1 No |
What is the difference between Information Protection and Information Assurance?
I run an SMB. I have 4 people in my entire company and a web-based store. I don’t have the time, patience or manpower to have a computer guy. Why should I care about exploits and computer jibberish?
What is the difference between a Black Hat and a White Hat?
Why would you bring in an outside contractor to perform a penetration test?
What do you think of social networking sites such as Facebook and LinkedIn?
You are remoted in to a headless system in a remote area. You have no physical access to the hardware and you need to perform an OS installation. What do you do?
How would you find out what a POST code means?
You see a user logging in as root to perform basic functions. Is this a problem?
What are accessories in computer?
What are salted hashes?
What is the Chain of Custody?
What are the most common computer applications?