Information Leakage in Cyber Security

Report Title
SIT182 – Real-World Practices for Cyber
Security
Assessment Task 2 Problem Solving Task
Student Name
Student ID

Information Leakage Level
No(s)
War Game
Level
0
Affected resources:
Copy and Paste the URL herecorresponding to the level.
Description
This is the starting section of the War game , where student is
supposed to start this game.
SQL Injection
 SQL injection is mostly known as an attack vector for websites but can be used to
attack any type of SQL database.
 SQL injection attacks allow attackers to:
 It creates the spoof identity too.
 It creates the tamper with existing data .
 It causes the repudiation issues such as voiding transactions or changing balances in
the content of the website.
 It allows the complete disclosure of all data on the system .
 It destroys the data or make it otherwise unavailable .
 It become the administrators of the database server.
Observation
The insight of SQL injection attack possibility was observed.
Screenshot

Level Credentials –
Level 0 Password:
Impact Analysis
There was no such possibility in it.
Recommendation
 There are several steps every organization can take to reduce the
likelihood of falling victim to a SQL injection attack:
 Limit user access privileges: Only give employees and users
the ability to access to information that they need in order to
perform their jobs.
 Ensure employee security awareness: Make sure that
employees who have a hand in website development (as well
as dedicated Web developers) are aware of the SQL injection
threat and know best practices to keep your servers safe.
 Reduce debugging information: When a Web server
experiences an error, make sure details of the error aren't
displayed to the user, since this information could help a
hacker commit malicious activity and gain the information he
or she needs to successfully attack the server.
 Test Web applications: check Web developers work by sending
data through the Web server; if the result is an error message,

the application might be susceptible to an SQL injection
attack.