Hello, everyone.
So in this video, we are going to see a female injection onto a live Web site.
So as you already know, what is its general election?
We are going to insert over its HTML tags into any indication point onto the target application and
of the Web application interprets or executes our bags.
Then it is vulnerable to the injection attack.
As you can see or hear.
The tags that I have written is the actual tag, the heading one back in which I have written it as
a heading and heading back closed.
So I'm going to copy this and I'm going to go on to a website which is online learning Harward Dot Edu,
as you can see over here, and there is a search box over here.
So it is considered as my entry point.
As you can see, I'm not able to find any results or here, so I'm going to change the H1 back to let's
say it's too dark and hit enter.
Let's see if it is getting executed or not.
And yes, it got executed.
Now, if I change the tags and if I see if anything changes into the search query.
Let's see this and you can see it got changed, which means the target web application is actually interpreting
and executing whatever has been given as a query, which indicates that this is vulnerable to its general
election.
As you can see, when I used it to H3 three AT4, it kept on changing the search query that I am heading
into the search box.
All right.
So I have created an image over here, as you can see, and I have posted this onto the Target website,
which is my Web site, and I'm going to give the part of that particular image into the entry point,
which is over here.
So I'm going to give this and I'm going to search for it.
And I will see if this Harvard University Web site is able to load the particular image that I have
hosted onto my Web site.
And if it loads it, then this is what they will do, its general election.
Now, if you remember for this, we use that image source tags.
So you can see over here I have used that image source tags, which you can see or hear the entry point
or the inflection point is keywords equals two.
And what is the key word that has been searched for?
It is image source equals to as as accurate x X-ray said upload slash rectified RPG.
And the successful image is getting loaded over here.
So this indicates the website is vulnerable to HIV infection.
And now if this particular you are is being shared with anyone, they may come across this Web page
and they will think like, all right, this website is down and they may get tricked in going to evil
dot com.
And if they go to that particular evil dot com and submit their credentials, then it will compromise
their confidentiality and integrity.
So I have posted the link over here, which we are trying to load.
So this is because it is getting loaded over here and this is how it looks like.
So I hope you guys understood this.
Thank you.