Hello and welcome to this video.
In this video, we are going to see practically what we have seen in the previous video about the logic
of Ezekial injection.
You can visit to this amazing website that is planning dot com Verint, you'll get amazing labs.
This labs are made intentionally vulnerable so that you can practice on it and you can prepare yourself
to get into real bug bounty hunting.
So let's get started.
Once you visit on this Web site that is planning dot com, you can scroll down and you'll see this Ezekial
injection.
You have to select this Ezekial injection.
So this application says this is the one rebill application we will be trying to hack with the ESKIL
injection attack.
So we will be doing all the steps as suggested in this one rebel lab, so years the application log
which will get to see.
So the first thing is to go ahead and try to log in with the following credential, the credentials
are using the red dot com and at the place of password, you need to enter password.
So let's enter both these fields and see what happens.
At the place of password.
Type password.
Peter Log-in.
So it is a known email or passwords, so the second step is to guess the password because the previous
password didn't work there.
So it says that the email put the same e-mail address that is user it, trade, email, dot com and
at the place of password again type password.
But if you notice closely, there is one single code at the end.
So we are going to enter password and then single code and login.
So it says the application crashed with an unexpected error.
So what does this mean?
So when an application gives you some error regarding this index, so you should be very happy because
there might be a chance that the application might be vulnerable to a squirrel injection.
So now let's see what happens into the logs window.
And also it seems that there is some syntax error due to the buzzword and single code, which we added
at the end at the input field of the password, due to which the syntax of the query is messed up and
created, something takes error.
So let's see what it is.
If you see this very closely, it's the same Querrey, what we have discussed in the previous videos.
So select start from users, users, what is the name of the table there?
Email is the name of the column where we have paused, use it to read email dot com and and is a logical
operator.
Your password equals password, single code.
This is what we have a date at the place of password due to which syntax error has occurred.
So let's see this clearly, it says that there is some syntax error, again, it saying so here is the
gold window they have made for the user's understanding.
So let's see in the gold window closely.
So at the place of password, I'm going to again type password and then one extra code so that to do
the hourly closing of the query, let's see what is the meaning of early closing and what I'm trying
to say.
So the next step will see that.
What does early closing mean?
So now you're I am again going to log in with same e-mail address and the password this time will be
single court space or space one equals one hyphen hyphen.
So do remember that Enescu hyphen hyphen means coming the rest of the part.
Whatever part of the query is we can maintain rescuable using hyphen hyphen.
So if you hadn't seen the Goldwin Doit's is what we have been told and what the grade is going to interpret,
it is empty then are, which is going to behave as a logical operator here, one equals one, which
is always a true condition.
Once value is always equal to one, you can select anything to equal to two.
You should select the condition, which is always true.
So your point is we have selected one equals one and command the rest of the part, which is hyphen,
hyphen and try to log in.
So now you see that without knowing the correct password, we are inside the application.
So this is all Ezekial injection work.
We tried to make the outcome of the query so that the database understands this result of the query
is true, that means I am allowed to show the result.
You would think the leniency of the audio operator we have spoofed equity and bypassed it without knowing
the correct password.
We have logged into the application.
So this is what the fundamental of a skill injection is.
And this is one simple basic payload of Escuela.
We are going to see more payload and more different techniques about the skill injection in the next
videos.
Thank you so much.