Welcome to this video lecture.
We will see how to find crosswords skirting bilateral dates with different security tools.
In previous lecture we have learned about access as overview.
OK now let's see one simple example to find excesses voluntarily.
Let me open up.
David Lee a level Miller application in this lecture I will demonstrate with security level low medium
and high
here you can see that security level is low
not like on accesses reflected you can see that this is reflected across our scripting vulnerable page.
So first of all let's try to add a normal text to analyze behavior of this page that accesses hit Submit
button here you will see that we get a response as Hello accesses this web page released they input
what I have sent to web application.
Now let me try.
Is this page 1 level 4 accesses or not.
What I'm going to do is first I will send accesses payload means javascript code that script alert exists
for level as message and closing the script.
Hit Submit button here you will see that we got Bob up message.
You can see that we have successfully ever to execute javascript on this page.
This means that this page is one level four accesses.
Let me show you in so it's called
you will see here in pop up so scored it is directly displaying user inputs.
Now I am going to change security level as media.
Let's see what happens.
Here is David Bluey a security select as medium and hit submit.
You can see that in top of the page security level is currently medium click on access as reflected.
Let's see that is this page one level for previous access his payload are not that open script alert
excessive level and closing scope
hit Submit button you see that his failure is not one level for this page let's see the source code
of this page click on we also scored
you can see or hear that deliver either some statement as yes there replace script replace with null
character by get name in the PHC stare replace function will replace only those characters which are
happier in the string.
So what I'm going to do is I will add Sam access as payload but there's one trick that is never Papa
doesn't concentrate on the guess and to do payloads.
So send a payload with small and big letters that opening script alert exists for level and close the
script.
Here you can see that we have got pop message.
This page is what level 4 accesses with gas in situ.
Now we are successful using with two level security
so change second deliver as high.
Now let's try with low level access as payload
this payload is not working in this page.
So let's drive it medium level payload
okay.
This payload is us not working
so let me open up BHP so its core of this page
here you can see that developer track replacing each character with null value as yes.
See.
Ah I see the pattern.
As I have told you earlier in the exercise of you lecture we can also find excesses flirty in Dom means
document object model.
So let's try to execute JavaScript in Dom type image SAIC equals to and hit submit button.
You can see that this has worked.
Type image a sassy equals to X and mentioned that would like on add a request to load.
Function exists will never
hit submit.
Here you will see or hear that pop a message in this lecture.
We have learned how to find excesses with low medium and high level security using this lecture.
You try it in stored exercise and so it will it will work successful but the thing is in stored exercises
all the payloads that you have submitted to server all this payloads are stored in the database.
But the question arise is what is the use of this vulnerability is a security issue.
How attacker can exploit this vulnerability in the lengthy lecture.
We will see how attacker can exploit this vulnerability
OK.
That's all about this lecture.
Thank you for watching.
I'll see you in next lecture by.