OK, guys, welcome to Attacking Face in this lecture.
We are going to attack on its taulbee excesses and very low security and let's see what it's going to
be, how we can simply exploit it.
OK, so first of all, what you need to do, as we all know, that you need to open a Web browser and
simply Di di Pietro SOPA was BWB, which is this annotator software thing, and it will find this kind
of interface.
So let me zoom out so that we can easily see whatever we are doing here.
Let me scroll down.
You will find downloadable application and simply you need to hit enter.
So when you hit enter, you will see this kind of interface where we all know that Erdmann is the user
name and password is same, which is admin and now enter and login.
So don't see it because it is quite irritating.
So now that we are inside the WWE, so here you can find lots of winnability that we have inside this
so we can practice it so far in this particular lecture.
We are going to start with Accessors is based organophosphates Torbay's.
Let's try with that exercise reflected once so that it will be easy to go in the order which is reflected
in store.
OK guys, for that you need to simply choose a security to load as Americans summit.
So the next thing that you need to do is simply click on access as reflected, so what it is doing here.
So as you can see that winnability reflected closer to scripting and it is asking for what is your name?
So this is asking for the name.
So I'm going to give my name here, which is the are now simply clicking summit.
So when I click on Submit, as you can see that it is giving us hello diwakar, that simply means it
is reflecting something on the web page like I will enter here one now hit enter.
Hello.
Now again I want to do like to know what it is doing.
Hello is very scripted but whatever we are entering here it is just reflecting that particular world
on a string in front of you in the webpage.
So this is how it is working here.
OK, guys, so when you see the link here, which is, as you can see, this is the link of this, what
it is doing here.
This is the thing that we have entered here supposed like let me change it here, Diwakar.
OK, so now as we all know, this says I to get basic this.
So when I type anything on this new parameter, whatever I'm going to type here it is reflecting on
the beach which is hiddenness.
OK, so for that reason I want to see the source speed so that we can understand this attack very easily.
OK, guys, so this is the page that we have here.
OK, so now let's see, is there any kind of OK where it is?
Let me increase the size of this.
OK, so as you can see, there's nothing like filtering.
So this is what it is doing, this is the BHB and this is simply getting your knee and it is simply
AECO knee.
Hello.
And giving your name, get name, whatever you enter in the place of name, it will simply get name
and echo with the help.
OK guys, so there is nothing like.
We can say there's nothing like it, this will bring something sooner.
We are well known that it is reflecting on the base.
Now, it is the clue or just the hint to try with the excess payload.
So what you can do here is not just try with the simplest JavaScript.
Payload, which is a script and of the script, simply was alert and sailors used a string like, I
want to see you.
Have been.
Hugged so disgusting that I want to display on a pop up window, OK, after that, what do you need
to do here is simply use this script, OK, a script, just close this.
OK, now hit enter.
So when you hit enter, as you can see that this is the pop window like this, you have been hacked.
So when you click on this, it will simply it will simply just disappear.
So what is the conclusion here to conclusion hit?
When you see it up here, you will see this is executing our whole come on, whatever we are entering
here, it does not filtering anything.
Anything means anything.
So now let's try with some other.
Come on.
That is for body script or body type actually onload.
A lot.
Now, let's give it here top.
OK, so this is what I tried to attend to, as you can see, this is simply reflecting whatever we want
to reflect it.
So what is the drawback of this particular thing?
I suppose that I've entered like this was the script.
And so in place of you have been hacked.
I can simply I can simply put a link here on the link, which is related to the Malisse website.
Suppose I have entered this particular link here and I send this whole script to the any you can see
client.
So when the client executed that script and it will and the client will see this particular dialog box
or what it will do, it was simply he or she will simply click on that link and they will be redirected
to the malicious website.
So with that Wizard website, I can simply install the malware from the website to their computer and
I can easily have their computer.
So this is a drawback and this is the dangerous, awful cross site scripting reflected reflectiveness.
So this is how you can see in the low security there is nothing like Felter.
You can do whatever you want to do.
You can simply inject any code here.
So I have.
So it's a website for you that for you so that you can simply don't there is no need to learn JavaScript.
You can use simply payloads like this.
We are having lots of paillard says you can use any one of them and you can simply enter on a on a form
where it is asking for something.
And today and you will have the results.
Suppose that I have chosen one of them.
Like, let me get back to OK, I want to do this, I want to inject this particular script.
So I will copy this and I will inject this.
And I heard and see what is what it is going to do.
So this is what it is saying.
This is taking it as a script.
I'll add one.
OK, let's see what the script is for.
I love it.
Takes one script.
OK, so this is what it is doing here.
Let me again copy this.
Let's try to do is the Terminator now.
It is not taking it as a large one.
So now let's try another one then.
We are having lots of payloads.
Which you can use here on air.
Let's try with this one.
There are some which will not work.
There are some which will work to its bond test on air.
You can see this is, again, not working.
So what is the problem here, source?
Let me check here.
Source one, a shot of one on one at a JavaScript alert.
OK, JavaScript and why it is not working.
This is not working because of what we did here.
This is one error on error, actually.
This is inside these bases or these are double codes.
So this is why it is taking it as a script.
So when you see the result, when you see that is attack me again, run this one.
It what it did was simply print the JavaScript alert so that you can see when I click on it.
OK, why does not summiting.
OK, let me set up here.
Wood based.
Let's go to the U.K., where this is, as you can see, it is not taking it as.
Our desired output, OK?
So here we have a large sofa like this, let's run this.
This is giving us results.
Here we have lots of payloads.
You can try one one of them and will work, actually.
So this is upon you.
What kind of things you want to do here?
So in this case, what what I want to teach you is that if you are getting if you're writing something
like Halo and when you hit and you are seeing that you're the string is reflecting ahead in the Web
page and in that link also.
So you can try to inject any JavaScript code.
So if it is an injectable to so it will simply reflect whatever you want to do with the help of JavaScript
code.
So this is all for this lecture, guys.
In the next lecture we are going to try witha medium one.