So I think this what we're going to see this either or neither stands for in the tool object reference.
So if you can modify some of your components and you can access the object and the observer that free
samples.
Let's take a look at this one.
So I'm just saying.
So this is let's consider this website as a panel so I don't have a set.
I'm just showing an example.
So if you look at here one on one.
So it will give you the right.
So if Edwin has logged in, it will have the dashboard.
So Dashboard can modify the values and not the values, etc., so if a normal user asks for directory
dashboard, then if your observer has been confirmed, um, configure and this dashboard can be accessed
by any user, the only user antagonistically.
You need to ask this dashboard, just the tip.
So there is some security in this object reference we are referencing to this dashboard and the Web
service providing to whomever it's been asking.
So that's another example.
So it start BHP questionmark idea is equal to say, 100.
So we will not get any page rate because of the troubles.
We are the data user.
So, no, I cannot excuse the idea of the one not one user supposed.
There are one hundred ninety members.
I am 100 member and there is one, not one member.
So if I just say it goes to one, not one.
And if I ask this or next year BHP account for this one, not one user, then if your observer has been
mis configured, then this relates to this either vulnerability.
So I that is not a vulnerability, but it's like a security risk.
You know, we get the one not one page.
That is one page for the one, not one member.
So in this way you can just change these ideas in the world and you can check whether it's you are getting
the response or if you are not getting any response, it's what it's actually configured as if you are
getting any response, like a valid response from this website.
Then it's how this either one or so we are going to try and we do and we are going to do this now.
It's also called Broken Access Control, because there is no, uh, a security check for this, uh,
authentication.
Are we going to compare this to this one parameter of account?
So in this account, if you put anything and it would be, uh, several better Web server.
So this is just the theory you can read here and here.
You can see that happen for any future admin and the time that happened for the good that we that had
been dashboard.
So let me just click on this computer.
So that is the theory I have expanded.
You need to, uh, modify or tamper these, uh, parameter values to check if you can get a valid response
or not.
So now we are going to do this starting so as you can see the example.
So this is my I am the user and I'm the user Thomson and I'm asking for the document, which is no posted
and Web server services.
So if I change these thousand two one thousand one and still we get the page because it has this in
there to indicate the of the for for.
So this leads to this accessing documents of this another user.
So I have already run this, uh, Web browser, so I run this machine and it has a browser.
So it is a web server running on the server.
I now really understand how that works.
OK, let me think on this and go to this machine.
Login with user note and test.
One, two, three, four.
So that's where this system.
So let me call this.
So test.
And pass, one, two, three, four, right, let me submit this, and it's saying I am not.
So there is one parameter that is not equal to one.
Let me change it to two.
So we do not get any response.
Maybe we have the response in comments.
OK.
Still, we do not have it.
We try to change it to three so we still don't have it.
So you can change these parameters from zero to a hundred thousand or anything like that.
And you can see the response so far, this brute force thing, we used to automate this task.
So let me say one, since we lost some output.
Let me change this to Barb and my purpose are running on an intercept is on this one.
Now, Republicans could consent to drooler and farro this better.
And in addition to the Republican positions they can see has already identified this one as a placeholder.
Let me clear this already out again.
So click on one and click on Adara.
Now we need to set the ballot.
So from zero onwards, zero, one, two, three, four.
And so.
So I'm just adding one to file and click on these positions, and I'm saluting this sniper attack as
usual, because there is only one person, right?
Click started the.
Now, this is a general 190 and we have got 198 Renford zero option and for one option, we got one
that is the default one and four to three and so on.
We got the 178 responses.
So let's see what this is.
So we have seen these two previously.
Right.
And see the response.
There is no.
So let's go click on zero zero payroll because the rent is different than others.
So we might get some.
So we have got the flag.
All right.
The zero is the answer.
So.
So zero users have the, uh, file that contains the content for that 540 copy this.
So we have successfully changed, modified the not parameter and we have successfully got the right.
And it's also significant.
So it's telling that we need to take this not bad.
So that's.
So we actually completed this, uh, I don't challenge so one thing you need to remember is whenever
you see these, uh, whenever you see, like these, uh, parameters, like with the value and the,
uh, value, like zero numbers are one, two, three and so on, then you try to change these values
and see if you are getting access to those results or not.
So you can also use the, uh, barbital for this to automate this task.
So that's all this video either challenge, I hope you have understood this is simply manipulating the
contents.
Sometimes you need to manipulate the text of this also.
So it's, uh, in rare cases, but in general, you can modify these or tamper these, uh, parameter
values to get the access to the results of another user.