Joe, an Attacker, Intends to Transfer Funds Discreetly from a Victim's

question 8

Multiple Choice

Joe, an attacker, intends to transfer funds discreetly from a victim's account to his own. Which of the following URLs can he use to accomplish this attack?

• A) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=False&creditaccount='OR 1=1 AND select username from testbank.custinfo where username like 'Joe'?&amount=200
• B) 1=1 AND select username from testbank.custinfo where username like 'Joe' &amount=200
• C) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=True&creditaccount='OR 1=1 AND select username from testbank.custinfo where username like 'Joe' ?&amount=200
• D) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=True&creditaccount='AND

---

Definitions:

Default Value

The initial value assigned to a variable, option, or field in a software application or database, used unless an alternative is specified.

Table Design View

A database view that allows for the detailed definition and modification of a table's structure, including fields, types, and properties.

Field Properties Pane

A user interface section in database and form design tools that allows users to set and modify the attributes or properties of a database field.

Required Property

A setting in programming and database fields that indicates a field must have a value before a record can be saved or a form submitted.