Hello and welcome to this video.
In this video, we are going to see another lab for the second payload, which we have learned in the
previous video.
So there is one more amazing website to practice, a skill injection, which is called game dot com.
So you can visit this website and you can perform as fuel injection labs for free.
So, Eskil, gold injection is what we are going to do.
You're the correct username and password is given on to the website itself, which is Edman.
The user name is Edman and the password is Edman.
One, two, three.
So you will have to go down your you will see the code in which you will be able to see the query as
well.
So you just have to run this so that you will see the application.
So there is some error.
You will have to go up again.
OK, so here is how the login screen looks like username and password, said the place of username.
I am trying to put admin as a username and the place of password I am trying.
Or some random thing, let's say A, B, C, D, E, F, so let's copy this thing and try to pasted
over here and on login.
So it is we were not found.
So when you try with any random username and password, you are going to see this screen.
So that is one drawback of this thing that you will have to reload it if you want to do the whole process
again.
So I am again going to go run the application.
I copied the correct credential because I want to see how the screen looks like.
If I enter in the correct password, I'm just going to type admin.
One, two, three.
Copy this and I'm going to pasted over and her don't log in.
So when you put the correct credential you will be able to see the screen, which is her law apartment.
So I am again going to try login now.
I'm trying to bypass it.
So I bought at the place of username admin and the place of password.
I'm going to try this thing, what we have learned in the previous video.
ABC single called Close or One Equals One, I make sure that I am not putting the closing single cord
at the place of one because I am assuming it is already been there by the developer.
So this is how I performed Escuela injection and I was able to log in and do the application.
The order.
If you scroll down, you will be able to see the standard output.
But already we have tried.
So with the query you will be able to see that our query is perfectly berlins of a payloaders perfectly
berlins into the query, and it is allowing us to enter into the application with the help of this query.
If you want to do for the labs, you can click on next Esquibel injection lab and you can do the processing.
OK, so I got Peter Gregory from there, I pasted it over here on to the sublime and let's break down
to understand what happened exactly at the back.
And so username equals admin has given us proof because we have seen that admin user does exist into
the user table.
Password equals ABC is going to give us false because we don't know the correct password or one equals
one or one equals one is going to give us.
True.
So if we do further processing true and false, false, false or true is going to give you true.
And this is how you are logged in and do the application.
I hope you understood this.
Thank you so much.