Question

During a web application assessment, your Burp Suite active scan flags a high-severity SQL injection vulnerability on a login form's username parameter. Before including it in your report, you want to confirm the finding is not a false positive with the least intrusive verification method. Which action best confirms the vulnerability?

Accepted Answer

Manually inject a boolean-based payload (e.g., ' OR '1'='1' -- ) and a benign control payload, then compare the application's responses for logical differences

Answer

Trust the scanner's confidence rating and mark the finding as confirmed, since Burp uses signature matching on responses

Answer

Run sqlmap with --dump against the parameter to extract the full database and prove exploitability

Answer

Re-run the same Burp active scan a second time to see if the finding reproduces consistently