ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ54

VerifiedDatabase Penetration Testing Methodology

Christen is a renowned SQL penetration-testing specialist in the US. A multinational e-commerce company engaged him to check its SQL database for vulnerabilities. Christen wants to conduct SQL penetration testing by entering a massive amount of data to crash the company’s web application and uncover coding errors that could lead to a SQL injection attack.

Which testing technique is Christen using?

Explanation

Fuzz testing supplies unexpected, malformed, or excessive input to an application to trigger crashes, errors, or other unexpected behavior that can reveal implementation vulnerabilities. OWASP describes fuzzing as a technique for identifying bugs and vulnerabilities through such inputs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!