EC-Council CTT Analysis Workstation

Lab Scenario
"A web application www.movieabc.com is vulnerable to SQL Injection. Your task is to exploit the login functionality and retrieve user credentials from the database. Identify the UID associated with user 'john'."

Select the UID which is mapped to user 'john'.

  • A. 5
  • B. 3
  • C. 2
  • D. 4
Hint: Try bypassing authentication using SQL Injection. Look at the row where username is 'john' in the resulting table.
Explanation: The SQL Injection payload bypasses authentication and returns all users from the database. By reviewing the table, user 'john' has UID 4. Therefore, the correct answer is D.
Web Application Simulation
MovieABC - Login Portal
UID Username Password
1adminadmin123
2samtest
3mike123456
4johnpass123
5annaanna123