Please explain how you got the answer thank you. • Task 2.1: SQL Injection Attack from...

50.1K

Verified Solution

Question

Programming

Please explain how you got the answer thank you.

• Task 2.1: SQL Injection Attack from webpage.Your task is to log into the web application as the administratorfrom the login page, so you can see the information of all theemployees. We assume that you do know the administrator’s accountname which is admin, but you do not know the ID or the password.You need to decide what to type in the Employee ID and Passwordfields to succeed in the attack.

• Task 2.2: SQL Injection Attack from commandline. Your task is to repeat Task 2.1, but you need to doit without using the webpage. You can use command line tools, suchas curl, which can send HTTP requests. One thing that is worthmentioning is that if you want to include multiple parameters inHTTP requests, you need to put the URL and the parameters between apair of single quotes; otherwise, the special characters used toseparate parameters (such as &) will be interpreted by theshell program, changing the meaning of the command. The followingexample shows how to send an HTTP GET request to our webapplication, with two parameters (SUID and Password) attached: curl’www.SeedLabSQLInjection.com/index.php?SUID=10000&Password=111’If you need to include special characters in the SUID and Passwordfields, you need to encode them properly, or they can change themeaning of your requests. If you want to include single quote inthose fields, you should use %27 instead; if you want to includewhite space, you should use %20. In this task, you do need tohandle HTTP encoding while sending requests using curl.

Answer & Explanation Solved by verified expert
3.8 Ratings (557 Votes)
Answer 21a or NameAdmin if you see the URLhttpwwwseedlabsqlinjectioncomunsafehomephpusernamea27orName3D27Admin2723Passwordwhere    See Answer
Get Answers to Unlimited Questions

Join us to gain access to millions of questions and expert answers. Enjoy exclusive benefits tailored just for you!

Membership Benefits:
  • Unlimited Question Access with detailed Answers
  • Zin AI - 3 Million Words
  • 10 Dall-E 3 Images
  • 20 Plot Generations
  • Conversation with Dialogue Memory
  • No Ads, Ever!
  • Access to Our Best AI Platform: Flex AI - Your personal assistant for all your inquiries!
Become a Member

Other questions asked by students