Southern Maryland - Revision history

Larry Conklin at 21:00, 24 September 2017

2017-09-24T21:00:11Z

Larry Conklin at 20:59, 24 September 2017

2017-09-24T20:59:14Z

Larry Conklin at 20:58, 24 September 2017

2017-09-24T20:58:28Z

Larry Conklin at 20:57, 24 September 2017

2017-09-24T20:57:36Z

Larry Conklin at 20:55, 24 September 2017

2017-09-24T20:55:43Z

Larry Conklin at 20:53, 24 September 2017

2017-09-24T20:53:20Z

Larry Conklin at 20:51, 24 September 2017

2017-09-24T20:51:30Z

Larry Conklin at 20:43, 24 September 2017

2017-09-24T20:43:56Z

Larry Conklin at 20:38, 24 September 2017

2017-09-24T20:38:25Z

Larry Conklin at 20:36, 24 September 2017

2017-09-24T20:36:45Z

@@ Line 54: / Line 54: @@
    b)	AND 'a'='a'||'a'
    c)	AND 'aa'='a'+'a'
-   <pre>
+   </pre>
   '''Determine what database engine is being used by using SQL formatting'''
   Answer is here https://www.owasp.org/index.php/OWASP_Backend_Security_Project_DBMS_Fingerprint

@@ Line 50: / Line 50: @@
 .	What is the hacker trying to learn by adding each AND to the SQL statement “SELECT name FROM TableOne where  id=2 “?
    a)	AND ('aa'=CONCAT('a','a'))
    b)	AND 'a'='a'||'a'
    c)	AND 'aa'='a'+'a'
   '''Determine what database engine is being used by using SQL formatting'''
   Answer is here https://www.owasp.org/index.php/OWASP_Backend_Security_Project_DBMS_Fingerprint

@@ Line 50: / Line 50: @@
 .	What is the hacker trying to learn by adding each AND to the SQL statement “SELECT name FROM TableOne where  id=2 “?
    a)	AND ('aa'=CONCAT('a','a'))
    b)	AND 'a'='a'||'a'
    c)	AND 'aa'='a'+'a'
-  </pre>
+  '''Determine what database engine is being used by using SQL formatting'''
   Answer is here https://www.owasp.org/index.php/OWASP_Backend_Security_Project_DBMS_Fingerprint
   Also https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)#Fingerprinting_the_Database and

@@ Line 34: / Line 34: @@
   '''c)	This command allows a hacker to determine the site’s security'''
   d)	This command is bogus and will accomplish nothing
-https://books.google.com/books?id=N-4XDAAAQBAJ&pg=PT319&lpg=PT319&dq=telnet+ip+address+port+80+head+http/1.0&source=bl&ots=-kPqPRHEjG&sig=JEln91esv_wX5RH-u5Vf1j_gOiU&hl=en&sa=X&ved=0ahUKEwib0I2G1bnWAhVCSCYKHUKtBU0Q6AEIXzAJ#v=onepage&q=telnet%20ip%20address%20port%2080%20head%20http%2F1.0&f=false
+ https://books.google.com/books?id=N-4XDAAAQBAJ&pg=PT319&lpg=PT319&dq=telnet+ip+address+port+80+head+http/1.0&source=bl&ots=-kPqPRHEjG&sig=JEln91esv_wX5RH-u5Vf1j_gOiU&hl=en&sa=X&ved=0ahUKEwib0I2G1bnWAhVCSCYKHUKtBU0Q6AEIXzAJ#v=onepage&q=telnet%20ip%20address%20port%2080%20head%20http%2F1.0&f=false
 .	Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test on?

@@ Line 51: / Line 51: @@
 .	What is the hacker trying to learn by adding each AND to the SQL statement “SELECT name FROM TableOne where  id=2 “?
   '''Determine what database engine is being used by using SQL formatting'''
   Answer is here https://www.owasp.org/index.php/OWASP_Backend_Security_Project_DBMS_Fingerprint
   Also https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)#Fingerprinting_the_Database and

@@ Line 24: / Line 24: @@
   '''C.	It's when security information is gathered about an organization from totally public sources, such as surfing the web'''
   D.	It's exploring a network and its operating systems to get an idea of how it's all configured
-https://www.owasp.org/index.php/Testing:_Introduction_and_objectives
+        https://www.owasp.org/index.php/Testing:_Introduction_and_objectives
 .	What was the first movie to feature computer hacking?
-'''	WarGames'''
+        '''WarGames'''
 .	What does the following command achieve? Telnet <IP Address> <Port 80> HEAD /HTTP/1.0
@@ Line 42: / Line 42: @@
   '''d)	To illicit a response back that will reveal information about email servers and how they treat undeliverable mail'''
   e)	To evaluate the virus protection
-Answer https://www.aiotestking.com/ec-council/why-would-you-consider-sending-an-email-to-an-address-that-you-know-does-not-exist-within-the-company-you-are-performing-a-penetration-test-for/
+        Answer https://www.aiotestking.com/ec-council/why-would-you-consider-sending-an-email-to-an-address-that-you-know-does-not-exist-within-the-company-you-are-performing-a-penetration-test-for/
 .	Hacker believes application is vulnerable to SQL injection. Using SQL Blind injection finish this SQL Statement. http://newspaper.com/items.php?id=2 and ??????????? so he knows yes the application is vulnerable to blind SQL injection
-'''1 = 1'''
+   '''1 = 1'''
-Answer is here https://www.owasp.org/index.php/Blind_SQL_Injection
+   Answer is here https://www.owasp.org/index.php/Blind_SQL_Injection
-Also https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)#Summary
+   Also https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)#Summary
 .	What is the hacker trying to learn by adding each AND to the SQL statement “SELECT name FROM TableOne where  id=2 “?
+ '''Determine what database engine is being used by using SQL formatting'''
   Answer is here https://www.owasp.org/index.php/OWASP_Backend_Security_Project_DBMS_Fingerprint
   Also https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005)#Fingerprinting_the_Database and