Hello, everyone, welcome to this video, and we are going to see a practical demonstration of XHTML
induction onto a lab website, which is testing dot dot com.
So once you come onto this particular website, you can see here on the left hand side, there's a search
button.
And when you go, you will be able to search anything that you type over here.
So, for example, let's say I type testing for its HTML injection and he'd go higgins'.
It is getting reflected over here and there is nothing fancy.
It is just simply getting reflected.
Now what if I copy a code which is its general code of image source, as you can see over here.
And what is the source?
The source is from the attacker controlled website.
As you can see for demonstration.
I have put, as I said, Gardot, X, Y, Z and into uploads directly.
I have uploaded an image which is hacked to find out.
So let me just copy this Goyo and paste it over here and he'd go, so let's see what happens.
You can see the HDMI code is successfully executed and the image is successfully loaded over here,
which should not have happened.
Now, as you can see, it says your website is hacked by hacked off site and kindly go to evil dot com.
Similarly, I have created one more Actimel code, so let's copy this and put it over here.
So what into this you can see there is an input button, so obviously we are going to get a button and
we have given on click, which basically means when the button is clicked, location, not a traffic
between means redirect to evil dot com and print the button value to log into a new website so the victim
will get tricked over here and he will think like the button is for the link to the new website.
And once he clicks on it, he's going to get redirected onto the attacker control website, as you can
see over here.
And there can be an exact replica under the attackers controlled domain or website through which the
victim will not know that he or she has been redirected to a fake attacker controlled Web site.
Now you can see there is a button which says login to the new website.
So I'm going to click on this and you can see we have redirected to evil dot com because that is what
we wrote into our code.
Now, you can do a lot of tweaking with this code.
As you can see over here, I have tried to change the style in which I have given the height and the
width as well as well as I'm giving a color y you can just do this little bit of changes and tweaks
according to the website template, so the victim get tricked into clicking that particular button.
So you're I have to use the color green.
You can choose any color you want, according to the website, as you can see, everything, all the
links all here are into blue.
You can choose this blue as well.
So the victim gets tricked into clicking the particular button that you have created.
As you can see, we have also increased the size for the burn notice.
Log into the new website.
And when I click it, I will again get redirected onto the attackers control Web site.
So this was a very, very basic example or demonstration for XHTML injection attacks.
You can follow the Puzey and try to identify the similar kind of entry points or injection point into
any target website to find a general election.
One more thing I would like to share is in many cases, whenever you try to sign up onto any target
website at that particular point of time, when you give your name, the first name and the last name
there, also you can try to input the XHTML tags and you must have noticed that you get an email verification
link or let's say you get a template message which says, Hi, Rohit, welcome on X, Y, Z website.
And that particular time with those first name, last name fields, if you give it HTML tags and you
see there is a XHTML tag, getting executed into the email that you have received is also an indication
of XHTML indication of valid vulnerability may exist on.
That target from application.
So I hope you guys understood this.
Thank you.