So the scan is over now and you can see on the left here you have our website clicking on it will show
you some results of the spider web.
It was looking for the files.
The very interesting part is the alerts here.
Right here you can see all the vulnerabilities that have been discovered on the left here you can see
that we have seven red flags.
So these are the high priority alerts.
We have three orange flags and five yellow flags and zero blue.
So these are organized in the order of their severity.
Clicking on any of these categories will expand that and show the threats that have been filed related
to that threat.
For example clicking on the path traverse of you'll see all the or else that can be exploited to read
files from the server.
Clicking on any of these you'll see the city pier of course that was sent in order to discover this.
You'll see the response.
That's why the tool thinks that this is vulnerable and we can see that and the response that it was
able to get the contents of it is password right here you can see the door out that the tool used to
exploit this vulnerability.
And here you can see a description of what the current vulnerability is and how it has been exploited.
And here you can see the risk of it.
So this is very high.
You can see the confidence of how confident the tool about the existence of this vulnerability.
You can see that it's been injected into our page and the attack is trying to get it issued password
so let's try it and right click on this and open it and browser.
And as you can see now it exploited it for us and it showed us the output for this vulnerability.
And we can read the content of it is the password and you can see that the exploit is being exploited.
And this you out right here let's have a look at another example.
For example or cross-site scripting.
And again the tool also checks for post and get parameters.
So sometimes when the parameter when the injection is sent into text boxes or even sent without X-boxes
if it's sent a post parameter you won't see it in the or out.
So it actually checks for post and death and you can see here it found a vulnerability in a post request
and the register page and it also found one in a page.
Again right click and open browser will execute it for us and we can see the code has been executed.
Again we can have the or all of the execution right here if you want to use it with before any other
tools and we can see it in here as well.
You are Albats we use to exploit this vulnerability let's just have one more example of an skill injection
again.
Click on and it will show you why it believes that there is an obscure injection here
it will show with your help and it will show you the fact that he used a used and one equals one
and it's in the parameter password.
And if you remember we actually did exploit this parameter often in this in the browser will show us
that the injection has been is working and it's using their username and password codes up
so that all is very simple very powerful and very useful.
You can play around with it you can play around with the proxy and with the options and see how you
can enhance the results and achieve even better results.