ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ48

VerifiedDatabase Penetration Testing Methodology

Arnold is attempting to access a database by injecting exploit query statements through a WHERE clause. He wants to use the WHERE clause to retrieve every entry from a specific table (for example, StudName).

Which query must Arnold write to retrieve the information?

Explanation

A tautological predicate such as '1' = '1' always evaluates to true. When injected into a WHERE condition with OR, it can make the condition match all rows in the table.

Community Discussion

No comments yet. Be the first to start the discussion!