Lab 12.3.6 Perform an SQL Injection Attack [WLOs: 1, 2, 3, 4, 5] [CLOs: 1, 2, 3]

 Task Summary

Lab Questions

Q1What is your account balance?

Your answer: 582.29

Correct answer: $582.29

Q2What is the account number of Nisha Dickson?

Correct answer: 90003

Explanation

In this lab, your task is to perform a simple SQL injection attack on MySecureOnlineBank.com using the following information:

• Make an account query for account number 90342.
• Perform a simple SQL attack using 0 OR 1=1.
• Answer the questions.

Complete this lab as follows:

1. From the taskbar, open Chrome.
2. Maximize the window for easier viewing.
3. In the URL field, type mysecureonlinebank.com
4. Press Enter.
5. In the Enter your Account Number field, enter 90342.
6. Select Lookup.
   The account balance is $582.29.
7. In the top right, select Answer Questions.
8. Answer question 1.
9. In the Enter your Account Number field, enter 0 OR 1=1 for the SQL injection.
10. Select Lookup.
11. Answer question 2.
12. Select Score Lab.