Hey, guys, welcome back to another episode on how the heck.
So now we got to discuss about Xixi part two.
All right, so this is the part where we are going to try to launch the attack against your Web application
system so we're can lesson number four of Web going under a, for example, external entities.
So all we could to do right now is to look under this section.
All right.
So he stays in this assignment.
You add a comment to the photo when submitting to form, try to execute an injection with the comments
you try listing to directorate of the file system.
So the first thing we want to do is just go ahead with the normal process.
All right.
So which is to understand what happens when you go through how a normal user will actually input data
into the system or into the database and ultimately returning as a result.
So it can enter, for example, test and I can click submit and immediately we can see over here that
we have the result test.
So we have input at something right into the system.
So it returns the following information under your command view.
All right.
So what we can do next is to investigate the situation.
So first thing is you can actually go to a top right corner of your Firefox or Chrome and go under web
developer, click under network.
All right.
So right now, in this case, I'm going to enter tests and click submit.
All right.
And I'm going to pass here.
So, of course, we have the lesson overview lesson manual that again, comes a lot of times to get
a web good.
But what we're looking for is to post instruction here.
So under simple, I can click on it and we can look at the parameters and in this case on the programs,
we can see the XML version equal 1.0 and followed by tax tests.
All right.
And of course, we got a response and this is the feedback.
Sorry, the solution is not correct.
Please try again so we can look at the parameters and we can do a right.
Click onto the roll and click on edit and reset.
So over here on the edit and then we can look at the information.
Right.
So we have to host the user agent ASEP language, the referral and we have these J session ID.
And of course what's really important is the content type.
So in this case we have the application XML.
So in many cases it could be different type of content type.
So it could be other types of application.
And as we submit all these different instructions in a Web application system, we can also change how
we want to tell the Web application system what kind of application or content type it is about using
applications XML as part of the declaration.
So under the request body over here we have XML version equal 1.0, OK, and we have come in.
So what are we going to do right now?
Is that every place to Paillot for us?
So over here we have the XML version and we can just copy the following over here.
So I'm going to explain to you what it all means.
All right.
So I'm going to pass it.
All right.
So we have to doctype we have to change law and then we have the entity.
So in this case, we're naming entity as E and we have system fall.
And of course I can enter slash plus W.D. And of course in this case, under the comment part, I'm
going to change this.
All right.
Into the end sign.
All right.
Which is right above seven.
And then we can enter.
So once you've seen all those details, you can actually run it and you can go in, enter Sayne, OK?
And we can pass the information right here.
So, again, what we're doing is we're trying to submit information into the Web application system,
trying to get some kind of response from the system.
All right.
So that's one of those ways.
So, of course, if I do a refresh, I may or may not see the results being placed into the into the
comment section.
So no worries about it.
So what we can do once again is to enter, for example, test completists, click summit, OK, and
pass it once again, go all the way down to the bottom under simple right so I can do a edit in recent.
And right now I'm going to page the same information again.
But this time around with Volp the specification etek possibility.
All right.
So I'm just going to change this, for example, to the end sign followed by XXXI.
All right.
So once you have all this information and input being put in place, I can play it and I can click on
send.
So once has been sent into the Web application system for processing, I could go in and double click
on it.
All right.
And we can see over here.
All right.
So we got different results coming in and it says, sorry, the solution is not correct and it says
must end with a sample.
OK, we so we are getting our messages coming in from the feedback.
All right.
From the Web application system or from the POZA.
And of course, here we can see Java X XML.
So go back into recession, OK?
And of course, in this case, I should have placed in a semicolon at the end of the declaration.
So I can play it now and I can click on Sene, so once I'm done with it, let me pause it double click
on it right now, OK?
And we can see congratulations.
You have successfully completed the assignment.
So this is one of the ways where we can use DELYS Web developer onto network tap to edit our payload
and sending it over into the web application system as it does to parsing.
The next option that we have is to actually turn on Bourbon Street.
OK, so I can over here, open up a terminal and enter suite.
So this will start up sweet.
All right.
So once we started, we can click on NEC's and we can start berp, OK?
And we can go back under the proxy and we can enable the proxy and I can edit it over here so I can
buy into port.
All right.
Eight, eight, eight, eight and click.
OK, OK.
So once we got it, we can click into Septet and I can go back under Firefox and I can go on to preferences
and go on to settings and click under Manuell proxy configuration click.
OK, so once we have that we can see all the instructions coming in so we can drop all these different
details and I can go back into the web server and now I can go ahead and enter, for example, another
one here.
I can enter test and click submit and will get picked up by Bourbon Street.
OK, so I can drop the lesson manual MVC lesson above you don't MVC.
All right.
And this is the one you were looking for, which is post SWEPCO slash simple.
And we have, for example, over here the XML version so I can do a right click and send to repeater
or control.
Ah.
So once we click understand a repeater over here.
So this all the information that we already have and you can click send and once you click send you
get a results coming back.
Right.
So he says sorry, the solution is not correct.
Please try again.
OK, so right now I'm going to go back into Depay Loaded.
I've crafted for you so I can do it right.
Click copy and now we can pass it over.
All right.
Replacing the existing XML that we already have already.
So I can write click and I can paste the results over here.
OK, so we have the following.
Right.
And we can go in and click on the center and of course immediately we get a result.
Congratulations.
You have successfully completed the assignment so I can also enter, for example, Etsy plus W.T..
All right.
And I can also click send.
So of course in this case it says sorry, dissolution.
Correct.
But no worries.
What we're trying to do is we're trying to get back certain results from the Web application system.
OK, so once we're done with this, I can go back to Web, go, all right.
And I can go on to preferences and I can Temperley turn afte proxy and I can just click on the refresh.
All right.
And we can see the results coming in.
So in this case, we can see over here we have the list of users under ETEK possibility that we have
enumerated.
And we also have, for example, over here, which is the list of all the directories inside the root
folder.
As you can see here, we have Opti Amante and so on.
So, again, there are a lot of things that we can do as part of an attack where we can make the system
do all sorts of instruction, listing down directories, giving us a differential, putting up a back
door and many, many different type of attacks that can be followed up from here.
So once again, I hope you've learned something valuable in today's tutorial.
And if if any questions, feel free to leave a comment below trama.
Best answer.
And of course, sort of like sharing.
Subscribe to a channel so that you can be kept abreast of the latest cybersecurity tutorial.
Thank you so much once again for watching.