So now, guys, let's see what is Torbay's exercise and it's going to be very fun to see how to exploit
this vulnerability.
OK, so for that, I need to log into my Linux machine for which I am going to give the username and
password so, as you can see, can only be accessed as a deflected.
So now let's see what I'm going to do.
It is set up and create a reset database.
OK, so now I'm inside BBWAA.
So this is the home page of David Blooey.
So when you scroll it down, let's check the security which is on high.
Let's make it to low and click on summit it.
So when you click on something, let's get back to it.
So, guys, this is the place where we are, where we are going to enter our payloads and exploits and
simply see what it's going to be.
So how it's going to be, actually.
So now let's see what it is doing here.
So this is asking for the name.
And here we are having message board.
If you want to write any message you can write, you suppose that I wanted it is asking for the name.
So I'm going to give you a name which is DIWAKAR
smart.
OK, so message that I'm going to give here is hello.
How are you?
OK, so this is the message that I want to ask from you and the missus like.
All right, message I want to give law, and so this is the message that I want to give here.
OK, so simply click on Sign Guestbook.
So when you click on Sign Guestbook, as you can see that the actual loan growth so this is how it looks
like whatever I'm going to enter here, it will going to reflect it, OK?
So one thing from here, we can see that it is whatever we are going to give there, that is mean.
And as you can see here, there is nothing like.
So this is supposed to be a request.
OK, so what it is doing here is it is simply storing all of these things inside this server or database
or whatever I'm going to write here.
It will be stored it here, I suppose, in case of reflected accesses, whatever I give the payload
like I want to give this.
So when I give this payload and just click on some it, so what to do, it will simply alert you.
It was simply executable it payload.
OK, so when I suppose that Iman's condition, when I get back to it again, it will not do anything,
it will start.
Fanda is starting but in case of a stored you can see that when you click Venu on somewhere else, when
you get back to exercise or whatever you see here is what you have entered earlier.
Appositive it is suing you that so that this means that whatever I'm going to give here, it will be
stored inside the server.
OK, guys, is this clear?
So this is the thing that I want to explain.
What is the difference between it?
OK, so now let's see.
Let's have some fun here.
OK, so what I'm going to write here, it will reflect here.
So that means I can check for the excesses.
OK, for Exercice, I will be going, as we all know that this is on security.
OK, so now let's try with the word.
We can say that.
Let's try with our.
It's.
A script, disclose it and then a lot of it is so it is not taking any kind of input of.
So whatever I'm going to write, it will not take why it is so.
So let's check how many characters it is allowed to enter inside the name field.
One, two, three, four, five, six, seven, eight, nine, 10.
So it is allowing me to enter only 10 characters name or whatever you want to enter it.
Only 10 characters are allowed inside this particular box.
So now let's give my name again here.
Let's check in message body.
Is there there any filtration or not?
No, there is no there is no filtration.
Yes, there is.
You can only enter one, two, three, four, five, six, seven, eight, nine, 10, 11, 12, 13,
14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28.
You and 22, 23, 24, 25, 39, 40, 41, 42, 43, 44, 45, 44 it around 40 to 49 characters are
allowed inside the message body.
So this is the cricket.
So now how you can do how you can enter your building.
So instant message body, you're allowed to enter around 40 words, 40 characters saw here.
What we are going to execute here, I think the size of that particular script is less than forty,
forty eight.
So now let's try with this one.
Right now, the click on this link.
Not like it's slink.
A script.
Now, let's try to sign.
So when you click on sign, as you can see that we are successfully injected over JavaScript code and
now this is showing us error.
So the trick is supposed that if someone is allowing if someone is just to see if someone is doing here,
daddy, you have only to look at Dosso.
And then here and there are two places to now you have the idea that if something is restricting you
so you can choose the another one and you can try there.
Now let's try to get back to it like this.
So it was so you'd like this.
So this is because you have installed your JavaScript code inside the server.
So that is why I know when you ready to get back to it, it also it was error.
Whenever you simply refresh it, it will show you this error.
This dialogue was actually.
So this is how stored this exercise works.
Now, let's see, first of all, what its source code looks like.
OK, guys, so when you see its source code inside message body, this is message text, one, two,
three, four, five, six, seven, eight, nine, 10.
OK, this has posed this.
As for the first one and this is my A string and this is Gabe Synagis, as you can see that there is
no there is nothing like any filtration in any.
And infiltration of script in this case, this there is nothing that is why it is simply executing a
command, which is which was a script.
So now let's see in the next lecture how we can inject the vita is how we can inject our code inside
this inside this name tag.
OK, inside this name, please.
So how we can do that, we will learn in the next lecture and to get back to this normal, to simply
go to setup and click on create.
And they said, let's get back to this.
We will see nothing like it.
OK, so this is all for this election and we are going to see in the medium settings how we can exploit
accessors.