Hi and welcome back to another episode on How to Hack.
So over here I have Firefox Web browser running, so we are going to access into a Web application server.
So I'm going to enter one or two one six eight zero two on two.
So this is made exploitable to that we have running via our Oracle virtual box.
So over here, as you can see, we have a massive that means log in to anticipatable and we got the
IP address of one or two one six eight zero two one two.
So, of course, Matus Floatable two is a vulnerable Web server that allow us to do different kind of
penetration testing, not just on the server end, but also on the Web application server.
And so we have Mutty today.
We have a which can be used for us in terms of Web application testing.
I understand more about open Web application, security project and the associated vulnerabilities.
So over here I have Mutilates running and I can go on all ups, top 10 and of course we can look at
the top 10 Web application vulnerabilities and we can also look at a couple of outtakes.
So over here, for example, we have SQL, I extract data bypass authentication, insert injection,
blind SQL via timing and so on and so forth.
So we have a lot of different ways for us to actually learn about cyber.
And of course, here we have one particular item, which is add to your block so I can click on that.
And of course, we actually have created a JavaScript attack on that.
So I'm going to click on reset database.
So the good thing about MUTILATOR is that you can very quickly reset the data inside the database that
allow you to retry some of the attack made, especially if you screw up the databases or you screw up
the test environment and it could come back here again, reset the database and you can go back and
try again different attacks.
So once I'm here, as we can see, we are on the Web application server in and we can see the entry
over here.
So we have an anonymous and we have to date and we have the comment.
So, for example, if I want to test, I want to try and save block entry and immediately we'll get
another anonymous block and all these items that are being inserted into the system.
So what I'm going to do next is I can actually try to inject any kind of script to see whether the input
forms are being sanitized.
So I can enter, for example, script and I can close the script and I can put, for example, alert
and we can put, for example, hacked.
OK, so this will do a pop up of the word hacked.
So if I click on Save Blocked entry immediately, we can see that the JavaScript managed to get past
the Web application server.
And if I scroll all the way down, I can see that there is a Blang entry here, but it's not really
blank.
It is being loaded as a JavaScript.
So we're going to introduce to you web developer option.
So if I do it right, click and I click on Inspect Element, OK, and we'll come to this console.
All right.
So this is the web developer console.
You can also access it from the top right corner of Firefox.
And you can click on the web developer and you can click on toggle 2s, inspector web console and all
these different other taps.
All right.
So, of course, over here I can actually look at TRD.
So LTT is a table.
So it is a table column, Bill.
So we can actually expand is a little more.
And we can see that this is the item that we have actually injected into the Web application server.
And of course, it has a script opening and a script closing and in a pop up call hacked.
So immediately we can do inspection of Alamin.
OK, so very easily we can understand what's going on.
So I can also inspect element on the text box.
OK, so we can see the rolls, the columns and all these different data.
So that's the whole purpose of inspect element to understand what are the values that are actually being
presented to us in terms of looking at what data are acceptable, what data may not be sanitized.
So that's one of the ways that we can actually look at using the web developer option.
OK, so we have a crosseyed scripting as well, so we have input made it all right.
So we can add to your block, view someone's block, DNS, look up and all these different injection
matter.
All right.
So the other thing that we also want to look at is in terms of trying to get more data.
All right.
So we have HDMI injection as well.
We have a two year block.
We have GDP Hater's, we have Domme injection, kookie injection, capture data page, comen injection,
JavaScript injection and many other different capabilities for us to Tassell detect Mantid.
All right.
So one of those methods that we're going to look at is also in terms of going back into DVDs.
All right.
So we can hit enter back to.
The main page on TV so we can enter Etman and we can enter the password and we can log in to the site,
so of course once we are in a site, we can actually change the script security to low so that it's
easier for us to learn, especially if you're starting out on a web application penetration testing.
So once you changed it to low, we can also click on, for example, on sequel injection.
We also have Croci scripting reflected and so on our CROCI scripting.
So what are we going to do now is we are we can click on set up and I'm going to create and reset a
database again, because again, the great thing about this is that you can reset a database, especially
if you've been doing a lot of different attacks and you want to retry again, all if you just inserted
a lot of different kind of attack methods that kind of screwed up the database, then you can revert
back to its original form it.
So going back into Staut.
All right.
So this is cross site scripting.
And again, this is very similar to the earlier tutorial you saw on D Mutal today.
So I can enter, for example, Tarsa.
Hello.
And I can sign Guestbook.
All right.
So immediately we'll see a new data being inserted into the database.
So again, we are testing once again for Screwtape Attacks so we can enter script and we are able to
enter alert and then we have, for example, hacked it.
All right.
And we can actually click on Sign Guestbook.
And once again, we are able to see that we have the ability to get it pop up.
So once you have JavaScript attack being enabled, there's a lot of things that you can do.
You can do redirection to a different site.
You can inject a browser exploitation framework so you can inject a script into the site.
And immediately you'll be able to run your own scripts inside a legitimate site so you can cost a lot
of damage for whichever user is logging into the site.
So once again, if I click on Inspect Element, so over here once again, if I open it up, we can see
that we managed to inject Descript into the site and this is how we get the script alert running.
So you could as I mentioned earlier, it could be many different attacks.
It could be the script for a redirection to a different site.
It could be for browser exploitation framework, which I've seen earlier before.
So, for example, if I were to open up a new private window, OK, and if I, for example, go to one
or two, one six eight zero two one two.
So I go back to the the today, which we have already injected a different script.
I inject a defective script into the site.
So what's what's going to happen next is that we're in a login as a different user so we can go to Ops,
we can go to the, for example, HDMI injection and we'll be able to actually click on Add to your block.
And immediately, even though we're logging in as a different user, we will still see the same JavaScript
being run as hacked.
The reason for that is because whoever is accessing the website has the malicious script being injected
into the site.
So whoever reaches the legitimate site on this page will get script and the hackers can do whatever
they want and it will be able to get a lot more damage from here.
So with that, I hope you learned something valuable in today's tutorial.
And if any questions, before you leave a comment below, I'll try my best to answer any of your questions.
So I would like share and subscribe to the channel so that you can be kept abreast of the latest cybersecurity.
Thank you so much once again for watching.