Chapter 5

1. Blind SQLi is SQLi where the results aren't visible; error-based SQLi expose sensitive information via carefully crafted SQL errors and time-based SQLi.
2. Aggressive SQLi injections can potentially damage a database or application.
3. Google Dorks are search queries designed to expose potentially vulnerable sites. The term comes from the hapless employee who mistakenly allows a sensitive document to be indexed by a public search engine.
4. --timeout, checks, --scope-include-subdomains, --http-request-concurrency MAX_CONCURRENCY, and --plugin 'PLUGIN:OPTION=VALUE,OPTION2=VALUE2' are all useful configuration flags for the arachni CLI.
5. You can generate reports from .afr files using the arachni_reporter CLI:

      arachni_reporter some_report.afr --reporter=html:outfile=my_report.html.zip

6. The $where clause in MongoDB is particularly vulnerable to injection.
7. If...