ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50 All Questions

View all questions & answers for the 312-50 exam
Go to Exam

Exam 312-50 topic 4 question 34 discussion

Actual exam question from ECCouncil's 312-50
Question #: 34
Topic #: 4
[All 312-50 Questions]

Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

  • A. DataThief
  • B. NetCat
  • C. Cain and Abel
  • D. SQLInjector
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Len_Shand at Jan. 3, 2021, 2:46 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
blackkofia
7 months, 1 week ago
A. DataThief Purpose: DataThief is a tool for digitizing data from images of graphs, not for SQL injections or database exploitation. Fit: Not suitable for SQL injection tasks. D. SQLInjector Purpose: SQLInjector (or tools with similar names) is specifically built to automate SQL injection attacks, making it the most relevant choice for exploiting a database via SQL injection. Fit: Fits the use case perfectly. D should be the answer.What do you think?
upvoted 1 times
...
Chogi_
9 months, 2 weeks ago
Selected Answer: D
Does DataThief Automate SQL injection? What if SQL Injector since it also a tool but AUTOMATE SQL injections attacks and exploit database connections by manipulating the web application's interaction with the database. What do you think? i think SQL is more suitable for the task described.
upvoted 1 times
...
ionut1824
1 year, 5 months ago
Selected Answer: D
D is the correct answer
upvoted 1 times
...
dorinh
3 years, 7 months ago
DataThief is a tool used to demonstrate to web administrators and developers how to steal data from a web application that is vulnerable to SQL Injection. Data Thief is designed to retrieve the data from a Microsoft SQL Server back-end behind a web application with a SQL Injection vulnerability. https://diarium.usal.es/pmgallardo/2020/11/02/list-of-sql-injection-tools/
upvoted 2 times
...
Len_Shand
4 years, 5 months ago
This answer should be D as datathief is a reverse engineering tool
upvoted 1 times
jaycc
4 years, 5 months ago
I think there are two tools with the same name. 'DataThief' is the reverse engineering tool, but 'Data Thief' (with a space) appears to be an automated SQL injection tool. So it's more a typo than a wrong answer
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel