Certified Ethical Hacker (CEH) Practice Question

The attack leverages the fact that the database can initiate an outbound DNS lookup, sending exfiltrated data over that separate channel. Unlike error-based or UNION-based techniques, the results are not returned in the HTTP response. Nor does it rely on measurable time delays like time-based blind attacks. Instead, it uses one channel for injection (the web request) and a different channel for data retrieval (DNS), which is characteristic of an out-of-band SQL injection. Second-order SQL injection differs because it stores the malicious input first and executes it later in a separate context.