A Tester Who Is Performing a Penetration Test on a Website

question 59

Multiple Choice

A tester who is performing a penetration test on a website receives the following output: Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /var/www/search.php on line 62 Which of the following commands can be used to further attack the website?

• A) <script>var adr= '../evil.php?test=' + escape(document.cookie);</script>
• B) ../../../../../../../../../../etc/passwd
• C) /var/www/html/index.php;whoami
• D) 1 UNION SELECT 1, DATABASE(),3--

---

Definitions:

Reinforcement

In behavior psychology, a consequence that will strengthen an organism's future behavior whenever that behavior is preceded by a specific antecedent stimulus.

Operant Conditioning

The method of transforming behavior intensity by administering either reinforcements or punishments.

Shaping

A method of training by which successive approximations toward a desired behavior are reinforced.

Withholding Reinforcement

is a behavioral strategy where a positive outcome or reward is not given, aiming to decrease or eliminate a certain behavior.