And this video, we're going to have a look on some tips and tricks that you can use while exploiting
Ezekial injections.
So we've seen before the two main statements that we use to discover ESKIL injections is the statement
and the other by statement.
Now some websites try to implement security by checking the query URL for a number of words, and they
blacklist these words so that if they exist, they don't execute the query.
For example, they check for words like and or union select spaces and stuff like that.
Now we see how we can bypass Clydeside security or filtering using persued.
This is just another way to bypass some sort of some filters that's used in the server side.
If they're using a blacklist of these words, then you can bypass them using the ways that we're going
to talk about.
Now, for example, let's say you're trying to discover a scale injection and you're going to use a
valid statement by typing and one is equal to one.
So instead of doing that, you can just type it like so.
So a capital and and then use two to two equals two to two to.
Another way you can do and and Capital D and then put it one, one one equals one one one.
This way your query will pass even if the target website has blacklisted and same goes for the underbite.
You can type it like so.
And you'll be able to execute this query even if they blacklisted the world order by now.
Let me let me just actually run for you here so that you see, when you capitalized letters like this,
the query will still work.
So if we just type it over there by one, actually, I forgot to put my comment here.
And here we go.
You can see that it gets executed exactly the same way when you write order by one without without captor's.
Now, another thing that websites sometimes blacklist is the space, so they don't allow spaces in the
URL.
Now we can bypass that by writing a plus or a double comment instead of the space.
So let's have a look on query that we ran before, so we do usually do union select one two, for example,
and then we close it with our comment, which is percentage 23.
Now, after this lecture, we can actually run this statement like so so we can write it as union with
capitals, select again, capitalize some of the letters.
And then we can put the one to enclose it with our comment, and if the spaces are being used, if the
spaces are blacklisted, then we can put flosses instead of it.
So it can do union plus select plus one to.
Or we can write it as a union double comment, so we open a comment and close it, select open a comment
and close it, want to open a comment and close it, and that's it.
Now, these statements will be executed exactly like the normal statement.
Let me show you here.
So I'm going to my skill injection.
We put no one like usual.
This works now, we can just come in here, close the quote and put our statement.
And as you can see now, the statement gets executed successfully and we can see that we can use number
one and two to get values from the database.
Another thing to keep in mind is the comments, sometimes comments are blacklisted or sometimes not,
all of the comments work when you try to comment out the rest of the code.
So there is a number of comments that you can try and our examples within the hashtag or the percentage,
two and three was the best, which you can also use for LIFESTAR or minus minus as comments.
Sometimes you'll also have to end the statement.
So you have to add a semicolon to tell that this is the end of the statement and then add your comment.
And you can also use the double forward slash as a comment as well.
So we see in our examples, again, the hash tag was the one that works for us.
But sometimes if that doesn't work, then you can try everything.
You can try to forward for research, you can try the forest LIFESTAR and you can try the minus minus.
If that didn't work, then you should go ahead and add a semicolon at the end and again try for it.
Or it's large for star and minus minus and the hashtag.