Here is the ASCII Sheet.
You want to guess the DBO username juggyboy (8 characters) using Blind SQL Injection technique.
What is the correct syntax?
A.
Option A
B.
Option B
C.
Option C
D.
Option D
Get 50% Discount on All Your Purchases
at PrepAway.com - Latest Exam Questions
This is ONE TIME OFFER
50%
unreadable 🙁
Oh wait… click on the image 🙂
Actually… ALL ARE WRONG!
Though A has the correct ASCII values, all have broken SQL statements. In all cases only the first character of the username is checked. The substring’s 2nd parameter should increment for each following char.
Talk about useless esoteric knowledge…
i feel that the answer is A