Quiz — Injection
10 APPLY on A05: SQLi, XSS, families, demo http://192.168.0.1/ ethics.
Injection — Module Quiz
Ten APPLY items on OWASP Top 10:2025 A05: SQL concatenation vs parameterized queries, XSS as browser-origin injection with encoding/CSP, other families (command, LDAP, template, header/log), local bind+escape lab under $HOME/cyberlium-lab chmod 600.
APPLY: sku glued into SQL with +. Mechanism and THE fix?
APPLY: True or False: Client-side filtering fully remediates SQLi.
APPLY: Untrusted HTML written via innerHTML — what is it?
APPLY: True or False: BeEF cookie-steal kits are required Cyberlium XSS homework.
APPLY: Name reflected vs stored XSS at literacy level.
APPLY: User string passed to bash -c — family and habit?
APPLY: True or False: SSTI kits against random sites are in-scope for this module.
APPLY: curl http://192.168.0.1/ shows a TP-Link/Netgear “Router Admin” login. What do you do?
APPLY: ORM uses an f-string to build SQL. Still injection risk?
APPLY: You finish A05. What opens next?