So I just want to highlight why Asriel injections are so important and so dangerous.
The reason behind that is they are fine and you can find them everywhere and play a lot of places a
lot of big Web sites have these kind of exploits and like things like Yahoo.
Google had them.
It's they're very hard to protect against and it's very easy to make a mistake to make these exploits
available for exploitation.
The other reason that they're very dangerous is that they give you access to the database in many scenarios
if you find the skill injection you really don't need to upload a Ph.D. show or get a reverse connection.
There is really no point of uploading stuff and then increasing the danger of being caught.
Cause if you have access to the database as we see in here you pretty much have everything you need.
You have usernames passwords you can log in with normal username and password as a normal user or you
can if you're looking for sensitive data.
We can see that we had access to credit cards.
You pretty much can do anything you want so there there's really no point of trying to further exploit
the system if you are going to scale injection Bingo like that.
That's all you need really in many scenarios we actually use a PH we show to gain access to the database
and see if we can read it.
I say for example if you manage to upload a page PCL on the server on the server other floatable But
then you couldn't access the database.
There isn't much that you can see you can see credit cards you can see a username and password.
You really can you have control over the server but you can't read stuff.
So sometimes when you upload a PH reshelve the next step is to gain access to the database.
Another thing is that they can be used to do many things.
So if you find if you manage to find that Asgill injection in a web site that is not your target so
it's not the one that you're targeting but it's in the same server.
Then you can use it to read files outside the W.W. root.
So similar to file inclusion vulnerabilities you can use it you can use the Ogmund the username and
password for the admin and see if you can upload so usually the admin can upload a lot of things instead
of just the images.
And then you can upload APHC shell or Bicester from there and then from there navigate to your target
computer or to the target's website sorry.
Or you can actually in some cases you can use it to upload a page we surely can use this and Asgill
injection to upload a page we show.
So basically Asgill injections can be used as well including vulnerabilities.
They can be used as file upload vulnerabilities and also they'll give you access to the whole database.
That's why they are very very dangerous and very useful if you manage to find one.