Welcome back in this lecture we will see how to bypass logon page using your skill injection.
Our can also try to inject its own specialist cool query on inside the logon page in order to bypass
the logon page because what happened is some time lag in pages us are vulnerable to a good injection
if the loggin pages will never do as good injection.
Then an attacker can easily bypass that indication mechanism.
Now let's see how we can do logon page.
Good injection.
Now let's perform Escuela injection on long pages.
Here you can see that big wrap about the question.
So this is the question which we have used while testing your squill injection.
If I just go here you will see a log in pages.
Let's open up log in page.
Hit Haqq button to submit.
Here is the logon page is vulnerable to Eskil injection.
Here you can see that we are not logged in.
Let's try and the random credentials and let's see whether it works or not.
Here you can see that it has this that wrong as a name.
Our password.
Let's say the way inside the page file we can see the gray here.
Copied and pasted here.
Here you can see that this is the query which is executing at the backend.
Select start from user name is admin 1 to 3 and password is 1 2 3 4 5 regiment is doing and comparison
between the users of that input are between the data which is present in the database.
Now in order to bypass this logon page what we can do is we can do as Montlake.
In order to inject some squelch payload to server application Canfield's.
So what we can do is he the place of his name.
So if I just write here admin 2:59
single code one equals one
it means we are closing this file name by just your admin one two three and I'm adding an other condition.
That is when it goes to one.
So as we are now that one equals one and it's a universal truth this will remain true.
And by adding our operator this will not matter that whether this part will be true or not.
If this is true our condition will become true.
So in the place of password I just add here something.
I mean when it comes to one and in the place of name
OK.
Our query is ready.
Select start from user.
Their name is Heideman 1 to 3.
Ok one equals one.
If this will not deal then this will be true and the password should be password.
This will not do this part will always one equals one.
Let's try to add this our input.
So one admin went to 3 single code are one it goes to one copied up.
Paste it here.
Click on submit.
Here we are.
We are successfully able to log in and you can see that our injected query which is executed at the
back end OK so this was a small example that how it can bypass log in pages using as fuel injection
OK and that's it.
In this lecture.
Thank you and see you in next lecture.