Hello and welcome to section. Four of the goals exploiting
vulnerabilities, in your web application.
But so the first video section, for SQL injection,
attack.
Now in this video, what we are going to learn. So,
first of all, we will learn the basics of injection attack.
And then I'm going to show her in an example to
let me up in the lab setup. We had
inside Kali Linux machine, and we are
learning about SQL injection attack. So we have
known that you can perform automatic and
with the help of bird food to get information about wbts.
But yeah, you can also use the manual
techniques to find out the one liberty. So, turn
the section. We are learning about some manual
settings. So, how you can check if a
website is one of them into English. And I go
not, so we can find out, it's pretty easy. So, we
need to insert some malicious content and then
we can check if it is malicious or no.
We already have a dog. Get so let's the
fall. Let me open the browser. Here we
go. So we have just talked it just to
be a 3.1 lookout.com and
Using this website. I started so click
on sign up and this is the login page,
we have.
so,
We can insert fuel injection queries. Inside. This
login page has to get more information,
but first of all, we need to create a request and
went to intercept a request inside. So far.
Let me open website again.
All right.
I will try to insert for you to grease inside username
and password.
Let's see if you can detect injection, attack or not.
So awake next. Burp, Suite Community Edition.
All right.
And the next thing is we need
to set up the proxy. So let's check inside proxy
and acceptance of intercept should
be on proxies. I think that's fine.
All right, and as I already told
you that you can also perform automated scan with
the help of two professional. We're scanning facilities available.
So they can use that you can find out. Easily manual
technique is also very important. You should
also learn.
All right, if you click on that, you
can learn more about his condition attack. If you have
no idea.
And I live in such malicious data into into
website to get more information.
Okay, so now I
can minimize it and let
me open my browser where the
target is running. Let's change
the proxy settings again to some references that in
settings, Selectmen will proxy configuration
and then click. Okay. Alright.
That's okay. Now.
Let me die penny username and password because
we have no idea for example, admin. Admin.
Click login.
Request has been intercepted by burp suite
and where it is if you check proxy intercept.
So you can see here that
request is available right here.
Now, we have another option, other facility
available inside Brookfield which which we are
going to use. So we have used Intruder.
Now. We are going to use repeater, right? So
I will tell you the use of
repeater, but first of all, we need to send this
request inside. Repeater click
on the request, then
you can click Send to repeater. Or
you can also press controllers are sent to
repeater.
All right, so if I click repeater here so you
can see here that request is now inside repeater
rate.
I'll let you check the response. So let me send the secret Publix
and and you can see here, the
messages, you must login. It means the username
and password, which we have provided are intact. That's
why it is showing us a message.
You must login or right?
So we've been c302 message, all top-level here.
Best piano plugin.
You can check the hydro value of Liberty.
X value and render it. Renders not
possible.
Here right now.
How we can perform injection attack. So
what we can do, here we can edit your name parameter
and bass parameter here and we can
insert few injection for easier. So, what
injection goodies like this, let me show you in mousepad.
what we are going to answer, so,
We can insert.
what do you like this, for example, user equal to
Post Rafi R1 equal to 1. +
2 equal to
Same thing. ER, 1 equal to
1.
Let me change the font.
All right, haters. So now we
have usually go to admin and password Wegmans. I'm
going to remove admin and I'm going to replace it
with this.
Korea. And I'm going
to replace password with this equal to
one is always true. It's the True Glory and it
is possible that I can
throw away the
access offer application.
So, let's try this.
I don't believe this Corey so that's why I'm trying this one. Otherwise,
you can find various other queries on internet, but
you can you can try.
Okay, so let me copy this.
All right. So, let me copy this and let
me up in Burke Street. I let
me change it. So I'm removing admin and
I'm pissed in the school.
So, let me try this one. If you need me, go to this
impossible to Edwin. So, let's try to let
me send it. So, it says You must log in
Queens. This is incorrect.
Blank.
The password. Let me try this.
You must log into says not working. So let
me send the parameter into password
also, so I'm using the same but I'm
going to hear apostrophe space r,
space 1 equal 2 apostrophe 1.
you can find various other goodies on
internet, so
Let me.
Kicks. And now,
And have you go. So you can see here that we have
successfully logged in inside the website. So you
can see here that this is not actual username and password, that
really isn't even password is test, test. But I
have used SQL injection, Curry curries, and
we have successfully bypassed the
authentication grade.
You can see here that the messages 200
we have successfully logged in
inside the website.
All right. Now if
I open the login page, we are still not
logged in. So let me forward this request.
Rescinded, the pain. You can see
you.
Right.
Okay.
so,
you can right-click here and you can also send
it into.
One of the features or you can check response
in the browsers electric copy this.
Beast here.
And here we go, we have
successfully logged in inside the website.
You can see here.
Great.
You just need to right click here. And you can open
the request inside browser or you can also check show responded.
So I cleaned out your responses, got the link open,
the browser taste it,
and you can check the results are so we
have successfully logged in inside the website without using actual username
and password. So that's how you can use injection
attack injection buddies to perform attack
on the website. That's how you can test the website manually because
you can see here that we have not used automotive scan of
about food. We have tested, it
manually me. And you can see here that we have successfully perform
injection attack inside the
websites. It means injection, male bodies of label inside
this website.
And the next video we are going to learn about cross-site scripting
or xss attack.