ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ8

VerifiedDatabase Penetration Testing Methodology

James, a penetration tester, discovered a SQL injection vulnerability on the website http://www.xsecurity.com. Using sqlmap, he extracted the website's databases from the SQL Server, including one named offices.

Which of the following sqlmap queries does James issue to extract the tables associated with the offices database?

Explanation

sqlmap uses the --tables switch to enumerate tables. To target a particular database, its documented syntax uses -D offices together with --tables; among the supplied choices, the one with the required table-enumeration switch is D.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!