A login request is recorded as:
username=admin' OR 1=1 -- &password=anything
What type of attack does this most likely indicate?
A log entry shows the following user input:
<script>alert('Hello')</script>
What type of attack does this most likely indicate?
A system log shows:
Request URL length: 5,200 characters
What is the most likely concern?
A user submits the following input:
name=John OR age=25
How should this input be classified?
A log entry shows:
username='admin' -- &password=test
Why is this suspicious?
A web application log contains the input:
SELECT * FROM users WHERE username='admin'
What type of attack does this most likely indicate?
A comment is posted on a website:
<b>Welcome!</b>
How should this input be classified?
A system log shows a cookie size of 9,500 characters. What does this most likely indicate?
A login attempt includes:
username=admin&password=12345
What is the most accurate classification?
Which of the following is the strongest indicator of a SQL Injection attack?
Which of the following is the clearest indicator of an XSS attack?
A log entry shows user input that includes the symbol “--”. Why is this suspicious?
A system shows multiple requests with extremely long query strings. What type of attack might this indicate?
A student claims that any use of the word “WHERE” means SQL Injection. Why is this incorrect?
A log shows:
<script>document.location='http://malicious.com'</script>
Why is this dangerous?
A system log shows normal-length inputs with no unusual characters, but includes the word “FROM” in a sentence. How should this be classified?
A request includes thousands of repeated characters in a single field. What is the most likely concern?
Which situation is most likely safe?
A log entry shows both a long URL and embedded SQL syntax. What is the best conclusion?
Why do analysts review log files for patterns like <script> tags or OR 1=1?