Come to this video lecture we will talk about how to find the good indiction will in multiple ways.
We have to start over or is orderless been broken radiation Yagan see that the oil is broken up.
Application is up and running.
Before going to start fast fashion ensure that your browser is configured with the batsuit.
So let's start breaks one level web application which comes inside with orderless be broken whether
the location
here you will find the Oist breaks link just Blekko that let's go here and select as Gunjan pages.
So here you can see there are totals six Kundan pages and uncondemned pages are vulnerable to as with
injection but 710 page 1 as the basics 1.
So let's open up content page 1 in the previous lecture.
I have told you earlier that in this village I will cover urbis as cruel injection and in which we will
dump the database too.
And it's good for one thing remember that before testing any of Legation we first have to find the logic
behind that application and how the application is working and what kind of girl ways are executing
at the backend.
Let us try to test with this ablation and with this page.
So we will see that this page is in the days of users
like user ID is 0 and use the name as admin along with the user email.
And here you will find a scale Kway which is being used for retrieving use that information Breck's
is ever level.
The it is showing is school Kway which is a good thing at the back and but when Yeoville Will the real
revelation like Google Facebook is nothing.
If we look at the world you will find an additional parameter card as ID and the value 0 is given to
the user ID.
Now let us try to get any integer is like 1 2 3 4 5 6 7 8 9 0.
Here you will see the response as error.
That user doesn't exist.
The first part of the finding as good education is to funds the application.
Now in your mind one question arise is what is the fuzzing fuzzing means giving.
And we are in part to the application so that we can able to break the school away with this well query
is executing at the back backend.
I have given and long integer values and alphanumeric ambos but we are not able to break the equation.
Now what we can do is if I just write here Id close to 2 you will see or hear that user details which
has Id do and much is looking at this great.
Now we can understand that is actually retrieving data from the database whose ID user is to write.
Now in order to break this Google query in previous data I have explained the error with this Google
query Left-Right once.
Lets add a single call and see what happens here you will see that we are successfully able to break
the SQL query we get response as is called error.
Now lets look at what are the other ways to break the spell queries.
We can also add double called
once again.
We are able to break this Guiel great.
Now instead of the Wilkos we can add backslash.
So backslash is used for escaping characters.
In my experience here you can see that backslash as works.
This means that this world location is vulnerable for a single code level code and vast last will work
depends upon the application logic because sometimes a single code will work and the code will not work
sometimes matchlocks will work and both of them single code and double code will not work.
The main thing is we have to find the application logic.
This is how application work.
That said in this video lecture we are continuing this investigation.
Thank you.
See you in next class.