Hey, guys, welcome back to another episode on How to Hack.
All right, so now we'll be discussing on bypass front end restrictions.
OK, so here we are back to Web goat once again, which is a Web application penetration testing platform
for us to learn all about Web application security.
So in this case, on the left side, we have client site and you can go ahead and click on the bypass
front end restrictions.
So, once again, users have a great control of how they can manipulate the data to input the content
we sent over into the Web application server so they can actually a man and change the way the structure
of the values that are sent into the Web application system.
All right.
So as something of a basic understanding of HTML, you're able to amend and edit the HTML through web
developer or even downloading the entire HTML page and dating the values, and then you can actually
send it over all the way to the Web application system.
So over here we can temper, temper and change the data and the values.
So in this case, over here we have few restrictions.
So sometimes some of these web developers, especially on the front end, they may create certain options
for you to select from.
For example, here we have a number of views.
So the first view we have, for example, option one, which is a dropdown list, we have radio button,
we have checkbox and we have an input feel.
All right.
So we have one, two, three, four.
So we got four options for us to input and submit into the Web application system.
So if I go in and click on Submit, of course it says, sorry, the solution is not correct.
Please try again.
All right.
So what we can do right here is to go Hando Right.
Click OK.
And we can click on Inspect Element, as you can see over here, inspect element.
So here we can see we have to form Closs.
All right.
So this is submitted into the Web application system so you can see the action slash web goats, bypass
restrictions, few restrictions.
OK, so we can look at the first one, which is a select.
All right.
So we have a select and we have a number of options right here.
So all you got to do is do a right click and click and did as HTML.
So what we can do is we can copy the information over here, OK?
And we can pace it and we can change the value.
OK, so I'm going to change this to option tree.
All right.
And this would give us immediately an additional option for us to select from.
So you see over here option one, two and three.
So now we have three options that we can submit into the Web application server by tampering with the
data on the browser, likewise on the radio button with two possible values.
So once again, we can change this so we can see over here we have input type, radio name, radio value
is option one.
And and of course, here we can see.
All right, we have checked, OK, and now we have input type radio name, radio value, equal option
two.
So once again, we can do a right click and then we can click and did 60 GML so I can copy all this
information right here.
OK then I can put it after the break.
All right.
So we can click on edit as HTML and I can hit enter on that pasty information over here and I can change
this to option number three.
OK, so once again I can hit enter on it and we can see one additional option right here.
OK, so we can see now we can one additional item that we can click on.
All right.
So we can select all the business option tree.
Next we have to check the box.
So again, we can see here we have the input type, which is a check box.
And of course the name is CheckBox and we have the perimeter checked.
So once again, you can click on to do the HTML space value.
All right.
And then we can put whatever value you want.
So in this case, I can put, for example, want to tree.
OK, so once again, we are changing the values that are being inserted into the Web application system
and finally on the text input box.
All right.
So here we have max length is equal to five.
So again, you can edit as HTML sort of restriction lies on the max length so we can change this to
six.
All right.
And I can add additional value for this.
OK, so right now, before I click, sum it.
All right.
So some real life scenarios.
Why do we need to do this is because as we are sending different kind of payloads into the Web application
system for penetration testing, whether is CROCI scripting, server site request forgery, SQL injection,
that could be certain limitations at the browser level that we were unable to push the payload into
the Web application system.
So with this in mind, by changing editing and tampering with the data, we'll be able to submit it
successfully into the Web application server, which can then get process.
For us to run certain kind of hacking techniques and tactics against the system, so now we can go ahead
and click onto submit and it says congratulations, you have successfully completed the assignment.
So thank you once again for watching.
And I hope you have learned something valuable.
And if you have any questions, feel free to leave a comment below.
I'll try my best to answer any of your questions and we'll like, share and subscribe to the channel
so you can be kept abreast of the latest cybersecurity tutorial.
Thank you so much once again for watching.