contestada

Which type of SQL Injection allows an attacker to try to alter the SQL statement such that it always returns TRUE (authentication attacks) or performs some function like delete or update

Respuesta :

Martebi

SQL injection is consist of Error-based SQL injection and other types of attacks.  Tautology is known to be the type of SQL Injection allows an attacker to try to alter the SQL statement such that it always returns TRUE.

SQL injection is known to be the merit of non-validated input vulnerabilities aimed to transport SQL commands via a web app for its execution by a backend database.

SQL injection is often used in;

  • Authentication bypass
  • Information disclosure
  • Compromised data integrity, etc.

Error-based SQL injection: Tautology

This is known as Injecting statements that are regarded as always true. This is often done so that queries will then return results upon careful study of a WHERE conditions.

In a tautology type of attack, the code is known to be injected that make use of  the conditional operator OR and the query that it will look into to is always TRUE.

Learn more about SQL injection from

https://brainly.com/question/13805511

Otras preguntas