Interview Questions Answers.ORG
Interviewer And Interviewee Guide
Interviews
Quizzes
Home
Quizzes
Interviews Security Interviews:Airport Security OfficerAviation SecurityBank GuardCentral Intelligence AgencyChief Information Security OfficerFire Safety OfficerFlight Security SpecialistHospital SecurityHotel SecurityHousing InspectorInformation Security OfficerInspector FireInspector HighwayJail GuardMilitary AnalystMonitoring OfficerProtocols OfficerRoad SafetySafety AnalystSafety InspectorSafety OfficerSecret Service AgentSecurity GuardSheriff
Copyright © 2018. All Rights Reserved
Information Security Officer Interview Question:
Suppose you find PHP queries overtly in the URL, such as /index.php=?page=userID. What would you then be looking to test?
Submitted by: MuhammadThis is an ideal situation for injection and querying. If we know that the server is using a database such as SQL with a PHP controller, it becomes quite easy. We would be looking to test how the server reacts to multiple different types of requests, and what it throws back, looking for anomalies and errors.
One example could be code injection. If the server is not using authentication and evaluating each user, one could simply try /index.php?arg=1;system(‘id') and see if the host returns unintended data.
Submitted by: Muhammad
One example could be code injection. If the server is not using authentication and evaluating each user, one could simply try /index.php?arg=1;system(‘id') and see if the host returns unintended data.
Submitted by: Muhammad
Copyright 2007-2024 by Interview Questions Answers .ORG All Rights Reserved.
https://InterviewQuestionsAnswers.ORG.
https://InterviewQuestionsAnswers.ORG.