Hey, guys, welcome back to another episode on how the heck so ribbeck to heck is on.
And we will be looking at this vulnerable Web application platform to do all security penetration testing
on.
And in this case, over here, we actually have the website running on Culex and we can actually log
out of the particular session.
So we are now on the e-commerce site and we can click on to sign in or sign up and I can go and enter
a and a and click sign in.
And of course it stays.
The following username or password are incorrect.
So of course over here, what we can do now is to go into your browser, go to top right corner, click
on your preferences and scroll all the way down.
So if, for example, you're in Firefox and you can click on netbook settings, click on a menu proxy
configuration.
So in this case, we have one two seven zero zero one in port of eight zero eight zero.
Click OK on that and go ahead and go to top left corner and we can go ahead and click onto Sweet OK.
So Sweet Community Edition would start and in this case I'm going to click OK.
Temporary Project Click makes use D Fort's Click Start Berp.
All right, so once you're here you can go ahead and click onto the proxy tab.
So in the future we'll be doing a few tutorial for Street across all the different tabs and functions
and capabilities on Bourbon Street for us to perform all bug bounty hunting to do our penetration testing.
OK, so once we're in all right, once we're in, what we can do now is to go back into Firefox and
go back to Hickerson.
All right.
So we can key in a for username and game, whichever payload you want to for the password.
For you click on to sign it.
OK, so once we click on a sign and it gets sent over into proxy a suite and we can see all the details
here.
So I'm going to do a control.
All right.
You can do it right.
Click copy.
All right.
So we can copy the entire feel.
All right.
So once you've done so, you can open up, for example, mouse parent in this case.
And I've actually saved all the information here so I can use it again or I can save it one more time.
So we have to post.
So this is what we are sending over into the Web application server from the browser.
And in this case we have user login, return your URL and we have the host IP address to user agent,
all this different information that we're sending over into the Web application system.
So it's very important for us to understand the fundamentals.
All right.
Of how Web application actually communicates with the browser or with the agent or in this case, we
can look at all the different details here, like content type content, length cookie, great and secure
requests and so on, so forth.
And of course, here we have the username and password for you.
Right.
So understanding how this structure works is very important because it helps us identify and also try
to manipulate and change different payloads or instructions that we sent into the Web application system
as part of a penetration testing.
All right.
So what we can do next is we can go ahead and boot up Eskild map to help us perform our school map to
help us perform the sequel Injection Attack so I can go ahead and open up terminal.
I have a separate terminal right here on the right site.
OK, so what I've done is I've actually created instructions for us to use.
So in this case, I'm going to explain a little more for you as we use the instructions here.
OK, so I can paste a selection so we have SQL map.
All right.
And we have Desh.
Ah, so this is the follow they'll be using, which is hackers on SQL Injection DSP.
So retargeting the username.
All right.
Level five, risk free DBS.
It's ten, so go ahead and hit enter on debt and this would begin rounding the attack.
OK, so just give me a second.
Let me take a look at the fall where we OK, silver KD to desktop so say to fall onto the desktop folder.
So now we can rerun the instruction again.
He'd have to run that and over here immediately.
Right.
We can find out more information.
All right.
States to following school map resume the following injections.
We've been doing it for the first time.
He's going to take a while because it's trying all sorts of attacks.
And in this case we have boolean baseline.
All right.
We have selected queries and we have time base Blyer.
So if you're not sure what all this stands for in terms of scale injection, especially in advanced
SQL injection, do check out Electret opposes a link on to comment section.
So check that out if you're not aware of how to run it.
OK, what all this all these different type of SQL injection.
So over here, immediately we are able to look at the two available databases.
So in this case we have hecker's on and we have information schema.
So obviously we're going to be very interested in knowing about Pécas on because that's likely the database,
which contains all the sensitive information of all the uses of the shopping cart, information of the
products of the passwords, the credit card information, billing address, the phone number and and
so on.
Information schema, it's more of a structure of how the database.
All right.
So what we can do next.
Is I can go back again.
So I've created all this different instructions are ready for you.
All right.
So I can copy this.
And let me explain a little more for you as well so I can post selection and it stays the following
school map are all right.
And we are specifying the file name again.
All right.
And of course, the user is a target.
All right.
Target parameter that we're going after.
And we have Dashti, meaning that we are looking into the database, Carcassonne and we're looking at
a column sort of threats.
OK, so transmitting we're running multiple threats against this attack.
All right.
So hit enter on that.
And right now we are retrieving all those information that is part of the database.
So in this case, we can look at all the tables in the database.
So again, we have a big coverage about how we run all those SQL injection, about the structure of
databases.
So databases.
Right.
You have full bite tables.
All right.
Followed by the information insert tables, which are structured in columns and rows, or in this case,
we have all the columns of each of the table.
So in this case, we have table news and we have the column, the type of data that you can input into
the column.
All right.
And we have the table wish list for the worse.
All right.
We have the column as well as type integer timestamp.
So it's very important for us to understand the basic fundamentals of Skouris, of how relational databases
work with each other.
And, of course, right now, not only sequel.
All right.
So again, we can look at wish-List wish list item.
All right.
We have enquiry's.
We have products.
All right.
We have Aldar address.
All right.
Personal data.
So you can think back about general data protection regulation.
I'll think about all the privacy laws that has been enacted across many, many different countries in
protecting its citizens data because those personal information and data can be used to access some
of this sensitive and critical services that you subscribe to.
So scrolling, scrolling up.
All right.
We can see again, more tax and here.
All right.
We have table users and table users seem to content contain quite a lot of sensitive information.
All right.
So in this case, we can look at password, we can look at credit card, we can look at email, let's
log in and all this even off provider and off UID.
So this is open authorization.
All right.
And we have photo, we cover password.
Resto could use a phone, usernames.
All these are pretty important information that the hackers could extract.
And as part of the extraction, they will be able to launch the attack against the attacks against the
user in question.
OK, so what we can do next is that after the game, the second information that can help us dump out
more details so I can copy this and I can go back into the terminal.
All right.
So I can go back in the terminal and I get pastie selection in this case.
So once again, we'll look at school map and we'll looking into the fall that we have gotten to post
into the system.
All right.
Now we have target of username.
We have to database hackers on and then we have Table Tibble users.
C stands for specifying the columns that we're going after.
So we have username, password, credit card, credit cards, TV critic, taxpayers dump.
All right.
And so go ahead, hit enter on that.
And over here retrieving all this information and we can immediately find the username, the password,
the credit card, all these different details.
And of course, very quickly, we could find out all these details.
We can do password cracking on it.
We can use all sorts of methods to gain access to the information, personal information, as well as
a critical data.
So very quickly, we can launch all those attacks.
So once again, I hope you learned something valuable in today's session.
And if any questions before you leave a comment below now, try my best to answer any of your questions
and we will like, share and subscribe the channel so that you can be kept abreast of the latest cybersecurity
tutorial.
Thank you so much once again for watching.