Work in this video lecture we will discuss inside your direct object reference insecure dark object
reference one that every day before going to start.
Let's see one example that there are five objects are Pfeiffer's
and days one and and the file card as Demel
we can access other file objects if our request condenses reference off the identifier.
And if you want to try to access that file object without the reference of the demo file we are not
able to access that file objects.
What happen is an insecure object reference the use of input is used to access a particular object.
And if the user adds something malicious so that it can point to something different object which means
a user tries to access a particular object.
But user is not authorized.
To access that object.
So if the user is successfully able to access that object which means that web application is insecure
direct object reference will never here you can see that yesterday by proxy request you can see here
and this request is accepting one parameter card as page.
And here is the page name.
So underscore the word appear to be.
This is our reference page parameter.
If you can see the end of the parameter archive page file and the file which we are trying to access
is card user file that BHB.
We can try this use a file that BHB if we are making a request with the reference of this file.
So it's not BHB.
Now let's demonstrate how this insecure dark object reference works.
For this lab demonstration I'm using old obviously broken web application.
Let me open this up so let's go.
You found the insecure data or bridge reference and the source.
Let's have a look at the functionality of this page if you want to look at the source code of any of
them.
Just select any of the file and click on the file less select any file to see the source of the file.
Yeah I am using loggin that BHB and click will fight
here I can see the actual score of log in page
Danon but suit in that.
So let's select any file in order to read the source code click on will find
and you will see that but so it will start blinking.
Let's go here to the backseat.
And here is the full request which is going to our browser is a post request.
And you can see that the request is going to this link.
Here is the best source for dark BHB is the best way.
We are redone.
You can see here now let's go back.
So here is the header.
If they host information User-Agent then Content-Length then left.
At the bottom here you will find the interesting information which give us an idea how direct object
reference works.
If we just look at here and the first here it is written page and the value of the pages.
So we were that page which is this one.
And then it is an additional up to fund which you can see here and the page file name is the file name
which we want to see here.
You can see that we have selected upload find that be a fine which means the space was dark.
We this one is actually acting as a reference in order to view the content of this page.
Let's change the page file parameter value as indexed or BHP.
Now let me just click on Farver.
If we are able to read the page source which means this web page is insecure that object reference when
Annabelle Let's see that whether we are able to see the entire page with source code you can see that
here is the source code of Nestler page profile.
You can see that we have successfully able to remove the bezels of next door we fine.
So we are not authorized to read the page source but then we can ever do with the basis due to insecure
object reference.
I told you earlier that what is insecure that object reference which means there are some files which
are not authorized to read by some unknown person.
Main's we are not at right to see the source of that files.
So this web application is vulnerable to unsecure direct object reference.
We can try to give the best source of different pages which are not listed in rubdown Afshan let's resubmit
the form again.
Now let's try to weave the basis of this page itself.
We on this page.
So as we were now page file does it was also we were BHB.
And if I just click on five or here you can see the fine is software that were fine and we can able
to see that the source of this page it says that all of our insecure that object reference will never
be.
Thanks for watching.
See you in lecture.