Hey, guys, welcome back to another episode on How to Hack.
So here we are back to Webcke as part of a Web application penetration testing series.
And on the right side, we have client side attacks and you can go ahead and click on to HTML tampering.
So here we are on the lesson.
And a concept is that browsers generally allow us to edit change information as we submit them right
into the Web application system for processing, either inputting into a database, updating the database,
or even removing from the database, just like your shopping cart, just like all this different data
that you may be inputting into an e-commerce site, a social media platform, your bank account.
So moving on to lesson number two, Orizaba accuracy's, try herself in an online store.
You ordered a new TV trying to buy one or more TVs for a lower price.
OK, so over here we have the quantity and we have to price.
And of course, we have a remove button.
And of course, it help us add into subtotal.
And over here we can see all this different information so you can go in and click on checkout.
And of course, you get the fulling response.
This is too expensive.
You need to buy at a cheaper cost.
So what we need to do is we need to be able to amend information that is being submitted from the browser
into the Web application system.
All right.
So what we can do is to make use of web developer to help us launch the attack.
So going to the right site, OK, we can go ahead and click on our menu and you can click on the web
developer and you can click onto network or you can use the shortcut control siff e.
So go in and click on it.
And over here.
All right.
We can see the lesson manual, don't NBC and so on, so we can easily clear all of them.
All right.
And you can go in and click on Chacko.
So once you do so we will have a following task, which is a post smattered and a status two hundred
so you can go in and click on it and we have the parameters.
So here we can see the quantity, the total number.
And of course we have the response and the response is feedback.
This is too expensive.
You need to buy at a cheaper cost.
So what we can do is do it right.
Click OK on the left site and click under edit.
And we said go ahead and click on it.
And what we can do here is we can look at the request hater's and all this different information and
we have to request body.
So in this case we have cut WHI, which stands for quantity and total.
So all you going to do is change in a man, any of the values under total.
So in this case we're going to use two nine nine nine.
All right.
So once you're done with this you can go ahead.
All right.
And click send.
All right.
So once you're done with it, you can click onto the new task or you can double click on it.
And it says over here, feedback.
Well done.
You just bought TV at a discount.
Right?
So immediately we'll be able to alter the way that we're sending data to and fro between the browser
as well as the Web application system.
So once again, I hope you've learned something valuable in today's tutorial.
And if you've have any questions, feel free to leave a comment below and I'll try my best to answer
any of your queries.
And we'll like, share and subscribe to the channel so that you can be kept abreast of the latest cybersecurity
tutorial.
Thank you so much once again for watching.