次のようなユーザー指定のデータがあるとします。 www.comptia.com/info.php?id=1 AND 1=1 ペネトレーションテスターが実装していると考えられる攻撃手法は次のうちどれですか?
正解:A
The user-supplied data www.comptia.com/info.php?id=1 AND 1=1 is indicative of a Boolean-based SQL injection attack. In this attack, the attacker manipulates a SQL query by inserting additional SQL logic that will always evaluate to true (in this case, AND 1=1) to gain unauthorized access to database information. This type of attack exploits improper input validation in web applications to manipulate database queries. The other attack techniques listed (Time-based SQL injection, Stored cross-site scripting, Reflected cross-site scripting) involve different methodologies and are not demonstrated by the given user-supplied data.