Hello, everyone, and welcome to this video.
So in this video, we are going to see three awesome resources that you can utilize as a third party
domain in case you do not have the collaborator client or your own VIPs, all the three resources are
totally free and you can utilize it as much as you want for your SRF testing.
All right.
So in the previous video we have seen about how we got InterAction's on our collaborator client while
we were doing a lot of testing on to a wonderful parameter, which was finally equal to on onto the
test.
BHP not willing Web.com which was this.
Yes.
And we got a request from this IP address.
So now we are going to test the same thing, but without a collaborator client.
So the first resource or a website that you can use is a Web site.
So you just need to come onto a Web site and it will wait for your first request, as you can see here.
The cool thing about this is that you get your own unique are as well as your unique email address as
well, which you can utilize to sign up onto multiple Web applications, which we are going to see in
a couple of more attacks of SRF.
All right, so let's use this.
I'm going to copy this to clipboard, which is my unique.
You are it.
Let's go to Bob's ute and now oh, here we are not going to use this collaborator client.
Instead, we are going to use this resource, which is our copied workbook.
So let's go back to Bob Suit and remove this and paste it.
Now, I'm just going to go before I go.
You can see where this is waiting for your first request and there is no current request.
Let me just hit go and go over here and you can see we have successfully got our first request here.
And again, see, this is the first request that we have received, which means there was a successful
interaction between the targeted Web application server and our client, which is our third party collaborator
that we have used, as you can see over here.
All right.
So let's move on to the second resource, which is a request been dot com for you.
You need to login and it is, again, free of cost.
So I have just signed up and I have taken Unnim, which is a hero.
Udemy, you can take any name that you want.
Now you can see I have a request being over here and it is also waiting for event and you can see your
end point over here.
So I'm going to copy this end point.
Go back to Wapshott and I'm going to utilize this over here and go and you can see success through.
Now let's see if we got an event over here and you can see we got one event will last twenty four hours
and you can see the event is this, which is a get request.
And you can see we have received this request and this is the IP address that we have received the request
from.
If you see closely, this is the same IP address that we received into our collaborator client.
Let me show you let me go back to Firefox and you can see this is the same IP address.
Yes, which is exactly the same of the target web application.
Now there is one more resource which you can use, which is a request, Gachet.
Now, let me just take a name.
Let's say we take the name as hero.
We don't request catch it just hit on get started again.
See, we do not have any request right now.
So let me send a quick request over here.
Let's copy the name that we are going to send a request to let us go to collaborator client over here.
And this let me go and you can see a request.
Perfect.
Let's go there and see.
Have we received a request?
And again, see, we have successfully received a request, which means that it is working absolutely
fine and it is making interactions with our third party client or Web server.
So I hope you guys understood these are some of the resources that you can use extensively for your
testing purposes, not only in SRF based on abilities, but in case you want any listener or client
onto the public.
Facing you are you can always use this.
Perfect.
So I hope you guys understood how you can utilize these resources.
We are going to use them extensively in our upcoming videos in case I am using collaborator client and
you do not have one.
You can also use these resources in future.
I hope you guys understood.
In case you have any issues or doubts, you can always ask into the Q&A section.
Thank you.