You work as a Network Penetration tester in the Secure Inc.

SANS SEC504 Question Answer

You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the security of a Web site. You go to the Web site login page and you run the following SQL query:

SELECT email, passwd, login_id, full_name

FROM members

WHERE email = 'attacker@somehwere.com'; DROP TABLE members; --'

What task will the above SQL query perform?

Deletes the database in which members table resides.

Deletes the rows of members table where email id is 'attacker@somehwere.com' given.

Performs the XSS attacks.

Deletes the entire members table.