Okay, so we have been this here, okay?
No.
We have this tax on our next challenge, so enter your password to log in.
OK.
Only some way made this logging thinking it wasn't you know, it went to any injection.
It was white.
However, there was another hole.
OK, so enter your password.
Let's try to board.
So we cannot agree on anything.
OK, good.
So let's try to do we freesheet.
Kay.
It's got to be crazy.
Nothing can type.
All right, so.
What we can do, anything we can.
So let's try first thing Crystal, see.
Paige.
All right.
It's called on.
Let's go down there a new thing.
Shoebox.
Maybe nothing is here.
No, nothing.
Nice.
Some pics, no.
Can I be to the Mozingo?
Nothing.
Okay, so you can try to inspect it as well.
Woo hoo!
Let's go into.
So no, no, no.
Could check this out at.
Swerve into.
And.
Or OK.
Because, you know, so we are checking on all the table.
I mean, on on every case and every table which are here because sometimes some encrypted file or some
files might be hidden.
And then you couldn't even see them.
And the view page source.
So when you use the inspect, so you see some files.
This is a basic 17 dot class Java fight.
So Java can be compiling.
So to do so, we are going to use it, too, so that we can compile it.
And after that, we will see.
Did we record that day?
Basic 17 dot class was within.
Yeah.
So what?
Roasting.
First, let's analyze.
This path using burb using Dobe.
I'm sorry, I said berp.
Just copy, eat.
We need to find directories so durable and control over the case.
We need to find all the.
Are they fired?
I mean, all the debris toys which are in this path.
Basic 17.
So now we gonna just wait a little bit.
But we have already had a clue about some find this because we see something is here.
So is this how we use.
Wait.
Hey, guys.
So care.
Scroll down to find if there are there are some other things.
It's click here.
Oh, don't be silly.
It's Dysport.
So we don't need it.
O k d o o you don't need them.
So we just need.
This area of scorn.
We just saw your basic sprinting class.
Class.
OK, here.
And indeed, each general.
OK, so this is an update from if you use Java, so you will.
It will not be a big stop for because it's so easy.
It's just an upgrade.
So they use and then they insert a file there.
And which a specific type, of course.
And this class, since it's not Dereel Java filer.
So we have to decompiled to that.
We can get it.
OK.
Now all scheme has been complete.
So let's try to check it out now so that we can see what kind of flowers we do have in there and stuff
like that.
Okay, so yours is good.
Easy.
Oh, is this an index index?
Nothing as important.
Is a Dutch, which.
BHP.
Good evening.
Nothing important.
OK.
So let's just go back here and try typing the Java classifier.
Do we have the basic seventeen class and then present a.
Keep.
So we downloaded.
So let's open the folder.
So it's here.
So now what are you going to do?
We are going to use it all.
And clearly, Newk, so that we can open this Java classifier, so that we can decompiled it first.
So the thing is, the tool is jammed.
And so you can just go back here or just Heils or you can open in your terminal.
And then before typing that, commun I'm going to I'm going to show you.
So you can just type Jod and then enter.
And if your job is already uncolored Unix and stuff.
So you will see this is version Jatta V one five eight eight E.
So therefore you can use this common jod, this tool Jide to decompiled it.
So what we are going to do this.
Okay, so we, we have to be in the directory path where or Java custom fight is.
Then we use Jad and then basic class and then so we present.
So passing cars, gene generating bicycle Kasauli.
You know what we can do?
We can try to read this file.
OK, so this we should now have a way to we need to can just open it with good deed or using cat.
You can read it.
So if you want to read, it would cut.
You just take Cat and Basic Dorji and then it wasn't.
So now you get definer here and sell your termini.
But if you want to to read it like and get it, you just get it.
Get it.
And basic dodgier.
And then you just presenter.
So let me just present a robot.
I would use this one.
So and so it doesn't matter.
The one that I use.
So.
OK, well.
So we have it here guys.
But you will want also to have it as a GeoEye comment, a a G wide Java compiler.
So to do so, you're going to go to this page.
Let me show you here.
And then you download this version of leanings, Deb.
And then you install it.
Sometimes it might ask you for many dependencies.
So just follow the steps.
And then just download it.
So if you want just what it's like over there with this video, we can just try to quickly download
it before they put it.
Let you put it to you on desktop.
Yeah, so let me put it here and stop.
Okay, so I downloaded.
And then let me put the meat crate.
Let me jump it here.
So I put it on my cutting machine, so they referred me to this is it.
So now you will go in to just right click and go to a desktop.
You read this thought.
There's a divide there.
OK.
Now you're going to use this comment.
Kate, BTG knows it.
I installed in D-Day and then when just prisoner and then you're going to wait.
Did the installation pause it?
OK.
So now you already have it.
So perfect.
Now what we can do.
No, you can open that.
That basic 17 dot class file using this.
Do I.
Now, we can go here if we want.
And then you just click here and I clicked open with J.
D Dash do I.
Okay.
Now, we're going to wait a little bit.
So we get it.
OK.
So therefore, that caused this, so we don't need.
Accident.
Accidentally click on this.
Okay, so now you have this, the computer, if you want, you can make the screen bigger.
So it doesn't matter.
So that you can read the code.
Perfectly OK.
And then you just click here.
No, you don't need this anymore because you are not going to open it.
And we cut or we get it or live bad because we used it before just to open it, just to be able to use
it with Janda.
But now we are not using Jad.
We are using GDL.
Okay, so let me close.
This would have ended more so.
Yeah.
Now we can close this if we want.
So you don't need any more of a though, so that's more than this.
We don't know.
What to Trish?
Oh, OK.
Someone in need.
Yes.
If it were to crash.
So.
Yeah.
And go on this stop.
Decent, we can give it.
Absolutely.
All right.
It's going into space.
Now it's time to analyze the good.
An amazing discord with quiet, always to have a knowledge about Jennifer Jafargholi programming language.
So, okay, so we're not teaching chequerboard.
We really encourage you to learn Java Noid because it's a very, very goo well-known programming language.
And it's fairly demanded on the market.
So let's call from the top tonight to down on Java applets or so.
This is for for some designs.
So we designed and put Java eight Venuti Coral Cave TextField key for building a text field.
You were away on it.
Multiform 16 Mission Action Center.
Okay, so if who's never been, it would be very helpful for you.
Sometimes you might create an object or a constructor and then it should match, which is specified
library.
So therefore you can just just.
Right.
Click in and import it and then automatically it would be you.
This thing must be ordered to have to type it by your hands.
Sometimes if you want something like like Java on it, you are where you can.
Just import java dot net dot.
You will not stop.
And so that's it.
It will it will include eau de libraries behind this.
Okay.
So Aiya what we can see first thing first and the find that we have seen, we have a class which named
Basic Seven which they extended to when that plate and then they implement it to action center.
So that means that class is a new intense forms, some plate and implement of action center.
Okay.
So since we own this type of acting phase.
So we have we have to consider every single string or integer.
What we have as as any information, you have to know them and put them down.
And so you saw the user create is Treen, which name five four basic seventeen blubber blubber, BHP
boss.
Okay.
Now why do Heater's.
He quoted TextField you Brookline's and then they eat.
Gives it a specif specific length of 15 bit.
Now Equator and is Terrene which which name is five two.
And then test it.
Now when heater's equate a method, if he does it create a constructor yet atras create a middle or.
And then the method is for this and Baucom Kuroki.
This is important for us.
Yeah.
Okay.
So now this is the constructor.
The constructor is basic 70 inspected eight and the it wants to do in the input line.
I mean any input or beat someone is putting.
So now it would we eat Viena Action Center.
And then he, he tried to find out a way that this true test.
Now he put it like it's equal in the challenge.
If he, if we want inmate wide this could lay dead.
Instead of putting it here he might awide is Treen let's say is the string you.
And then you might call it challenge and then why he is here.
He should just say phial to each quarter.
This one and this one might be challenge and age would be five to equal chance.
So never mind.
So this is good.
So then I'm going to complicate it.
Okay.
So below the equations, another method.
And then the method is going to perform in action.
And then it's an action event.
Action event.
And avoid waterlilies, blah, blah, blah.
Action event.
Okay.
So again, equate another string and this chain.
He did this quite dissin thing.
He what he wants to eat.
If it would input Áine in so that we get the decks.
So we know Equidae condition.
He said if this train is a quarter, if you will, he.
If you if you will heal your elite.
This is a condition then variable.
You will recall Newald.
It's not unusual or unusable.
So it's an important force for now.
And then he said 10 stream and Quessenberry Stream.
Which name?
The Stream one ekwall and Bone.
Harker's dot org.
And they equate stream to equal basic form is seventeen.
So.
So let's go down below what heater's.
Now he put an if statement.
But this is mainly used in that being in some Java application.
He just put it and try and cash.
So he said if you in that you will get that valuable if it's equal.
Knew you were going to come.
Inveighs of K.
Stream.
One stream.
One was what.
So let's go back to you.
This one.
Okay.
Pru's slash.
So this might not be important for us because it will be a stream and say to an inside.
They say the data that he wants to wait.
But since we know that we want to have some things, we are going to really we are going to be real
careful about it.
So he said Stream one Blue's Clues.
These DOT five two five two was challenges.
OK, so let's be really cool for lower rate.
Let's go heal.
So we copy this to one copy.
Could we eat and let's go back here.
So we posted you or Kasim Goldberg under the Ogie D Don't fight two photo wars.
What challenges did it strike you in day challenges?
So was there a slash, slash, slash?
Okay, so let's go again.
You will.
It is a quote for Lokey slash student to student who is Busiek 17.
So let's take a sleek 17 slash.
So there was a slash.
Okay, it's time to be expanding.
Now what he said, he said plus D fighter for food was equal to what.
So let's go into the call of a stream.
This is the world.
This one, we're doing the quotes.
So we control.
See.
We will copy.
Eat.
Firstly to hear.
Is it.
It's a good leg.
Was there is a slash.
No, there was no slash.
And then it is news.
Train elite.
So there was no snow.
So let's just try to copy these and then we go back here and the new plastic department might be elite
or the elite is encrypted.
So it would seem so.
And then what next?
What did he say?
And his squad, he said.
Catch.
Okay.
Catch my reforming me.
Okay.
Get up your nose and put Lendix that magic.
OK.
So this is all the conditions or the conditions that he puts.
So now we're going to try it out with guys.
So the questioner.
What you see this, that's unbelievable.
This it was very easy to understand and nothing.
It was encrypted or hashed or sided.
So we had everything as plain text.
And it's a very, really, really clear or understanding.
So did you see what he does?
Just string one and D string two and D one.
So it was Saud's.
So cool.
OK.
So let's go to the foreign challenge so that we can make it.
Where have you been.
Challenger 17.
So let's close these.
We don't need anymore.
And close this door.
So now let's go to challenge a dean will likely open a new tab.
OK, so let's open the new term.
So system meltdown, chorded, inarticulate scream.
Which pool?
Which pools are two calls from the database?
And it caused the content and with the content, but we think it could have a possible problem.
You mentioned something to do with the blind, something blind, something.
OK, so let's say it's a blind mean brain injection.
Excluder or brain exercise.
So, OK, so does it matter what it says?
Something that would blind something.
So here we see Htwe article.
So let's try to click on or on each of them and open them.
Just check them out.
Article one.
Nothing is inside adequate or not amusing, so I don't care.
So let's try to you page source.
If we see something.
We see in Queen do it, it would.
We are going to go.
OK?
Quite a while to see, OK?
It's nothing.
So let's go down.
OK.
So, yeah, nothing.
So let's close it and then we are going to open the third one the same way.
Well, Kerry.
So still nothing.
OK.
So what we can do?
We can try to win the first one again.
And then got you.
All right, let's try to play a while on which you were well.
So we see Article one, it an I.D. one.
So let's try to go on.
Let's try to change these two to to see what would be.
Article two.
So this might be Renuart to school imagination.
So we'll just check again.
Let's try to put Article three to see you see it.
It has changed here.
So let's try to put out a call for.
Embody that quote.
OK, so therefore, let's try to put out a call or something like that, okay.
Now let's try to inject some comment.
So which is true to let's say and and to equal.
Let's put it there.
You see, it returns again, Article two.
So let's make the comment, the British.
To that.
OK.
This one.
In one equals zero, which is false.
Which, as you will.
Which is false.
It's gate invalid article.
OK.
So now what are you going to do?
We are going to play with.
Do you want to do that?
We can inject some scrip so that we can have an access to the database.
So let's put it as it was.
OK.
Now, let's check how many corporate bonds are in the query to do so, since it is knowable to Brian
escarole injection.
So we are using a comment which is order by the order by command.
When we put it in, then you will wear it.
It will it will check how many clones are there.
So let's say, dad, we don't know what we are going to do.
So we just type order by.
So keep it.
It it pops up an invalid article equal.
So what we can do, we can try to see if it is by if order to it.
People do.
Yeah.
They did it.
Okay.
So Bordelais buy one or buy one.
If it returns to that means the query they did at PSA has more than one call on it during Ferentz.
That means does it have caught on.
So let's check to see it returns to that means.
Article two is here.
So let's say that buy to increase it again.
It returns to.
So we can.
That means they are modern than Cologne's or at least Koran's.
There is a two to us.
Let's say for.
Again, too.
So now let's check it see?
Seven, seven and nine percent.
It will turn into an invalid article.
That means they are less than seven Corones there.
So now you can try to to decrease it one by one.
They say six because really d choose four.
Four.
OK.
Less than six.
Now, obviously, we can assume that they are five colognes and stable.
So because we have already tried the fourth one and the sixth one.
So now let's try to see if we put five.
How how would we react?
We would find.
Article two, you see?
So it returns, too.
So therefore, we can try to type discom in order.
But it's union common to select all from these countries caught on.
And then from the articles.
Now, as we can see, this is like a table.
And then these bloody court is the content of this table.
So let's just try to say something like union.
Let's try you in yon
union all select, they live in D2 as one, two, two, three, four.
I would do it instead of command to leave those two, three, four, five Corones form articles, articles.
And now let's Wasendorf to see.
Congrats.
Now.
Thirty five point has been added, you see so decent name when we tried as it to Paul, it represents
the did the table and then the content.
He was the content of the table.
So, okay, let's go to the next challenge.
So this one was 18, so let's literally unite in one.
So we don't need this anymore.
We don't need disturbing you.
All can close them.
So let's go to.
Kay.
OK.
So.
Okay.
Drake has been studying some more Beechboro and has learned about the speech function Haider.
He has also found out about a new form of encryption password is a heyo somehow password Freeland.
OK, nothing.
So let's try to win some Escadrille injection or first stuff, or it should be between two space.
OK.
And tell you, quote, you can be whatever.
You don't need external quotes.
Well, goal was under involved Burswood.
All right.
So let's go back.
So now let's try to pierce the code.
Page source to see there are some information in the group data documented.
Let's chew on.
Nothing is green.
Not then only show.
Nothing.
OK.
Just on New Day, this one that we see this, so it's nothing important.
So.
Let's close it.
So, OK.
So this is a BHP firing.
No, Dad.
No, we will not be able to see the code of the PDP inside the page.
If we if we pick one of you, this was good because dysfunction is use it to send information.
And your response, vrd a leader because we can since it is a PDP.
So we cannot see the code, but we can see it in another way.
So what are we going to do?
We can avoid Cleek and.
Chores.
Inspect.
She was inspect and then we're going to go to network tab.
We take here to find more more sauce one for me.
I mean, so we keep on network and here we're going to we're fortunate to page.
So that includes all the information.
So we will finish it.
So now we're gonna see all the week waste and India responds.
So what we need is so we do.
We want the index page.
So this one.
So this is how it looks like.
It's a hater's.
But usually sometimes it might appear.
And preview always puns or cookies or timing.
So you get to click on Hater's because this is what we need for a PSP function.
So we are on headers.
Now we can just try to make this bigger.
Case that we analyze it in a better way.
So now here, this is the information that we have, for example, request me to get and the status
quo.
Two hundred and so on and so on.
And here we're going to look for some information.
There are some encryption because he said that he also has found out about a new form of encryption
key.
The new form of encryption is this, what?
Forty seven.
You have to know, don't get sore.
And then let's check it down content below.
Chris, that deal can.
That's so important for us.
Let's go down on.
Expo in November.
Not important, but.
OK.
Cookies.
So we have a password.
So this password might be encrypted via the owl or T 47.
Now for this information.
So let's try to go to the website and try to find out which kind of information.
If it's so.
All right.
So let's go here.
So we open a new tab.
So let's go to this Web site.
What?
What, 47 dot net?
And then was our.
And we're going to come back here.
And you got to compete at buzzword.
So we like we can copy.
And then you got to come here and sit here so that we see what kind of, oh, the war would get done.
We should try to use everything first and.
Yeah.
And what me.
Well.
Now, let's complete this takes.
You can just control a an.
That's right, click and copy.
And then you got to combine hail and try to rule.
Busted here.
So we.
First.
Okay.
And then no.
Oh, come on.
When I click on Submit.
Congrats.
Thirty point has been added.
You see, guys, so you have to put put your head on your shoulders and try to understand what it's
SAYES because it's it's always that joke used BHP but Henders.
So that's why when we click on Inspect.
So we're trying to find a way to go to network and headers so that we can see the BHP request and responds
in this way.
OK.
So we get Desplaines.
So it's close.
Is.
Let's get it to the next challenge.
It's 20.
So you.