Interview Questions

You are engaged in a penetration-test where you are attempting to gain access to a protected location. You are presented with this login screen:

Computing Security,Information Security, NT security, Web Security and Network Security Questions and Answers

(Continued from previous question...)

You are engaged in a penetration-test where you are attempting to gain access to a protected location. You are presented with this login screen: 

-----------------------------
| User ID  ___________      |
|                           |
| Password ___________      |
|                           |
-----------------------------

What are some examples of you how you would attempt to gain access?

Send us your answer, please.

Note: Goal of question – Determine if the applicant has a wide knowledge of different authentication vulnerabilities. They may attempt default usernames/passwords or attempt SQL Injection queries that provide an SQL true statement (such as – ‘ OR 1=1#). If they provide SQL examples, then offer them the following Error document information and ask them what this indicates.

ODBC Error Code = 37000 (Syntax error or access violation)

[Microsoft][ODBC SQL Server Driver][SQL Server]Line 4: Incorrect syntax near '='.
Data Source = "ECommerceTheArchSupport2"
SQL = "SELECT QuickJump_Items.ItemId FROM QuickJump_Items WHERE QuickJump_Items.ItemId <> 0 AND QuickJumpId ="
The error occurred while processing an element with a general identifier of (CFQUERY), occupying document position (1:1) to (1:42) in the template file K:\InetPub\clients\login\http\ailment.cfm
The specific sequence of files included or processed is: K:\INETPUB\CLIENTS\LOGIN\HTTP\AILMENT.CFM
This error message indicates that the target web application if running Microsoft SQL and discloses directory structures.

(Continued on next question...)

Other Interview Questions