So, listen, this will be seeing about the scoring action and Wall Street as well as current actions,
so I'm explaining the basics of scoring action and then we will see a robust reduction.
So in the next two years, we will see the union buser its current actions and will be doing this perhaps
in this video.
So you can see for sure explain the basics of the scoring action.
I have this table in full and it contains three columns already, username and password and only one
arrow and his password fresh, so on.
So.
So these are the contents of the table.
OK.
So in the application that can like BHP Arbi done so the quarry will be like this strictly telecom username
and password thrombin for where it's easy to, uh, to.
So SEMICON, so you get the result, right?
So whenever a
Harlettes user from infor where IATSE calls to.
So here we are getting the username right?
So in no application back in, what you have is it will have the right to use a name or something you
you need to provide in the water.
So it should be like this, like Dharavi.
So whatever you send the letter in the water, it will bring a certain shade of you.
OK, so.
Oh, oh, you should of providing too.
So there will be already one quotation mark.
So what you can do is you can provide that this pool, uh, single code and then what you can do is
uh you can do the true statement.
So like this.
So what this one is first we're uh making sure that it is to and then we are using the order and checking
the list goes on.
So when all discovery has been executed, I will get the same result as this one.
So let me execute this one.
And you can see we got the user name.
Uh, why did we get out more than Flash?
Because this is becoming so that's why the user name column has been internally displaced.
So you can see this input is not filtered correctly.
You can get much more information.
So you can also do.
And so you get only the flash because we are doing that an operation.
So both of these cases should be true.
When I do an operation, it will be this one.
And if I say one is close to two, this is false, true or false.
And then you get this, uh, warranty fresh.
So so how this relates to you can see now this leads to data leakage.
And also if you have like a select username and password are like Seretide sort of info where user name
is equal to Flash and the password is equal to flash.
So now you can see it two.
So now what I can.
So instead of instead of fresh, I don't know I don't know the password.
Let's assume for two, one, three and then here in the input field, what I can do is I can get some
fresh and single code and then I can put comment.
So this will be not and if I return to the same corner and I get the two, even though my password is
the wrong, but this has been commandeered by this other comment.
So in the square you can see, uh, two hyphen are comic.
And also, uh, this phone symbol is also the comment.
OK.
So these two other comments in the school and you can see from this input I have put this on me sorry,
single code and then put the comment.
So this part has been truncated and of course, we got the result.
So you can, uh, bypass the authentication into another user.
So you can also buckfast this pseudonyms.
So you can see from all you do not sort of this input, uh, do so many problems.
So now let's go and do the.
So here they are seeing vulnerability in category theater.
So the reason this is the back, end quote.
So what you can do is you can put this thing in code and this sort of to.
So here's what the court is doing is it is already displaying the range of products sold as accessories
so you can see categories, physical accessories.
So what I can do is I can put the thing in court and, you know, you can see internal server.
That means the entire college team has been, uh, error because of this single.
So that's why it rolls on.
So here's what you can do, is you need to specify Oreja or trustmark.
So here you get the prudential condition, Lubutu.
And you do this every.
So you can see much more information, so you can see congratulations on Sagala.
So here's what you can do, is
that you are incorrect.
So here, first check this.
I checked the water with the senior advocate and see if there is ever so good, just congratulations.
OK, well, you get some obscure rules like international law in this case, but actually you can see
the error on this page.
So in that case, you can put ah and and to see you get much more information like the data leakage.
So that is the first step.
So the next step is pursuing the same.
So I still have.
OK, here to see the world, and let's click on my account.
And now it's
important to note that so the parameters are being sent as a body, so let's call it this.
And based here, so I have already my Barpak, so let's go and sit down and write to him.
And again, I'll send this to Peter so you can see the leaders credentials are being sent to the body
so I can test the parameters.
You put the single code so you can see there is an internal server.
That means this parameter can be prone to a scoring action.
Let's make the true statement or one is close to one and then we are getting the pass.
So I think you need to.
So when need to learn and so we can also use this functionality in the world so you can on this, you
order and you type, so upon typing it will automatically and do you order.
So let's be content and to form.
So here we are.
We are writing to the icon again.
So that means I can just go ahead and say.
And it also put this one.
Or be pushed to a World Series of poker.
So let's go ahead and do this, because the CEOs are talking as much.
You can also post this in the password if you think the username has a separate quality and password
and you can see we are
OK.
So let's close this.
So we have done the pull ups where we used this at the screen.
Now let's go and do it in Python.
So let's see whether we can automate this entire process.
First one news or one news close to one.
The next one is.
So let me try these two Arpels, so I have already writing this script and now Sadun down for the Union
Baesler induction, so will be seeing in our next videos.
So focus on let's.
So it's the final function.
So it's called lifestyle copy this and based here, so are the calls to request first, let's get the
pet.
You are.
So that function, we need to pass this water.
So we need to try every road, so let's go in and do that for a year or parents.
All the windows.
So this gives some more flexibility.
You are helpless, so we need to abandon this.
Our parents are parents of flight, so each time we try to do this, so it will be happening at the
last of the year and we are getting so it's not are not status quo.
So this will tell whether we have a successful response or not.
It's a two hundred eighty four after getting this
indication if we got the 200 then or to print.
Or could.
But it's a fight, so we are telling that we are hoping that this period has been working.
Or we can see you order plus another.
You can also put the Assir.
So that's, I think the search for this or period sort of turned on this.
So you can see both of these have been working successfully, so like this you can automate using the
python.