George, a Reputed Ethical Hacker and Penetration Testing Consultant, Was

George, a reputed ethical hacker and penetration testing consultant, was hired by FNB Services, a startup financial services company, to audit the security of their web applications. During his investigation, George discovered that the company's website is vulnerable to blind SQL injection attacks. George entered a custom SQL query in a form located on the vulnerable page which resulted in a back-end SQL query similar to the one given below: http://fnb.com/forms/?id=1+AND+555=if(ord(mid((select+pass from+users+limit+0,1) ,1,2) ) = 97,555,777) What is George trying to achieve with this custom SQL query?

A) George is searching for the first character of all the table entries
B) George is searching for the second character of the first table entry
C) George is searching for the first character of the second table entry
D) George is searching for the first character of the first table entry

Correct Answer:

Verified

Unlock this answer now
Get Access to more Verified Answers free of charge

Access For Free