Hello, and welcome to the next video. So we
are going to analyze a report generated by Burke
Street and went West.
Select me, open the setup.
So now got that, I'm inside, Kali Linux machine, and
we are analyzing a report
created by Brooks Street. So
we have broken machine and
in the previous video, we have known that. How you can
generate a final report.
So you can
easily generate, if you click on target than if you click on site
map. And then you can take an IP address and right-click on the
issue. And then you can click on report issue, so
you can easily generate final report.
From brookseed. Not example, you
have created a report. So how we
can analyze it what it in tenting.
So let's check.
So look me up in a sample report.
From Burpee Seed. So here it is.
So this is created by a scanner
and obviously a professional.
so,
first of all, let's check the summary of the report. So I
report will look like this. The table
below shows. The number of issues identified, in different
categories of classified, according
to several deals, high medium or information. As
I already told you that burp, medium-low and
information about liberties.
This reflects, the likely impact of each issue for
the typical organization, according to
confident Society in four more tentative heading
to the liability of the
technique.
Got to undisable. Your D levels are for, you can
dissolve categorized into the conference categories,
like, starting or form or
tentative. So you can see.
The severity and
confidence.
The chart below shows. The
number of issues identified in each
category solid color.
So you can see here, that. These are
for 7-Eleven and these are the number of
issues and after
12 to 6. That is not
hurting. So bad.
Isaac needs confidence level.
So, tell 12 number of issues.
And you can also check the coding scheme
here. So high when nobody is in
the color medium orange color.
So that we can easily identify the most
impacted.
Or if activity shoes.
Nexus content.
Send content, you will get information about double liberties.
The application contains unless you
will get it.
Spell injection Willamette information. So you
can even Liberty
11, Junction, cross-site scripting without password
free without a computer and supplication.
I swing content, you will get a list of all liberties.
Open example. Let's take single, Bollywood.
So what you wanted me to come down and you
can see here, then you will get information about the details
of a particular issue. If you
choose voice command addiction than you read a tissue inside a
report. When somebody, you can see that several of
these high confidence level is form, posters with
host means that the website or
application, but they are in application which
which particular page has affected an
issue
background that you should have mediation and then
request, musically.
Question, response from worksheet.
Let me take a screenshot of that so we know that as conditioner.
And basically, you find out what I quit attacking and
injects, various militias, still Greece,
develop location to gather sensitive information on data
from the issue back
down there, so you can see how to make
out a contest in which there in Buda, please.
We need to insert malicious Play Kelis,
and we need to gather data from the sensory data
stored inside.
Gather information, like customer data example
phone number SEC, numbers customer information, customer
address affect how you
get an immediate. The most effective
way to prevent destination, guidance to use this method
uses to step Incorporated potentially change
the title, please.
so, the other
That's also leave earlier.
And see how you should be a bit of some commonly employed recommended mitigation
inside. So
what you get? So you
get information about the volume then you get
the page, which is affecting example, if I
Click on this so you will get information about
that particular page.
You can see here that this is
that you want to address book.
You can see inside the question response
yet. So.
Ncbw the single apostrophe.
and then,
This phone's we got better message.
Write, it means s condition when nobody's
available inside.
The part in the, in the particular website.
I like music by the one. For example, extra taxes that
you do so,
So, let's try cross-site scripting.
Lorex is a text to Alicia. Alicia has access
into the
application and I
got to control the volume with you construct, a request, which is
it.
This apply to JavaScript quiz.
Are used to execute within the user's browser so they
can use a session if you
let his log been inside and outside. So they
generally use HTML JavaScript course.
Can see your tattoo supplies in
contest of
the musician examples. And
then he will issue the mediation that
how you can protect your application from
process taking Molly with these. So that's
good.
and also, which pages
are affected with Scott accepting money with you, so,
These informations are available inside Refugee board,
which is great because we are getting information properly,
so that anyone can read this
book report easy. So you
can see you this report generated by Bob and probably
with
these inside your application. So this
is all about the analysis of a report.
And the next video we are going to learn about bug bounty.