QuestionQ357

Logs and Network Forensics

During a blind SQL injection breach at an online retail platform in San Francisco, California, forensic investigators analyze MySQL query logs to reconstruct schema enumeration in which attackers extracted stored-structure names without visible output, using system metadata to map credential storage for targeted theft. Which literal in the decoded request most clearly shows a query of the metadata catalog for object listings?

  • A Table_Schema=Database()
  • B Information_schema.tables
  • C database()
  • D table_name
Explanation

MySQL exposes database metadata through INFORMATION_SCHEMA, and its TABLES table contains information about tables in databases. Therefore, INFORMATION_SCHEMA.TABLES directly identifies the metadata catalog object used to list database table objects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!