And this video we're going to have a look on some tips and tricks that you can use while exploiting
as cure or injections.
So we've seen before the two main statements that we use to discover Eskdale injections is the statement
and the ORDER BY statement.
Now some websites try to implement security by checking the query you are l for a number of words and
they blacklist these words so that if they exist they don't x execute the query.
For example they check for words like and or union select spaces and stuff like that.
Now we see how we can bypass client sites security or filtering using verb suits.
This is just another way to bypass some sort of some filters that's used and the server side if they're
using a blacklist of these words then you can bypass them using the ways that we're going to talk about.
Now for example let's say you're trying to discover and scale injection and you're going to use a valid
statement by Taipan and one is equal to one.
So instead of doing that you can just type it like so.
So a capital and the and then use two two two equals two 1:58
And other way you can do on and kept all the.
And then put it 1 1 1 equals 1 1 1.
This way your query will pass.
Even if the tagged website has blacklisted and same goes for the Order By.
You can type it like so and you'll be able to execute this query even if they blacklisted the word order
by now.
Let me let me just actually run this for you here so that you see when you capitalize letters like this
the query will still work.
So if we just type that order by one.
Actually I forgot to put my comment here.
And here we go you can see that it gets executed exactly the same way when you write order by one without
without capitals.
Now another thing that Web sites sometimes Blacklist is the space so they don't allow spaces in the
OR ELSE.
Now we can bypass that by writing a plus or double comment instead of the space.
So let's have a look on a query that we were on before.
So we do you usually do a union select one two for example and then we close it with our comment which
is percentage 23 now after this lecture we can actually run the statement like so so we can write it
as union with capitals select again capitalize some of the letters and then we come up with the one
to unclose it with our comment.
And if the spaces are being used if the spaces are blacklisted then we can put Plus's instead of it.
So we can do a union plus select plus one to four we can write it as union double comments so we open
a comment and close it select Open a comment and close it want to open a comment and close it and that's
it.
Now these statements will be executed exactly like the normal statement.
Let me show you here.
So don't go into Maskil injection.
We put number one like usual this works.
Now we can just come in here close the quote and put out a statement.
And as you can see now the statement gets executed successfully and we can see that we can use number
one and two to get values from the database.
Another thing to keep in mind is the comments sometimes comments are blacklisted or sometimes not all
of the comments work when you try to comment out the rest of the code.
So there is a number of comments that you can try in our examples we've seen the hashtag or the percentage
23 was the best which you can also use force like star or minus minus as comments.
Sometimes you also have to end the statements so you have to add a semi-colon to tell that this is the
end of the statement and then add your comment and you can also use the double forward slash as a comment
as well.
So we see in our examples again the hash tag was the one that works for us but sometimes that doesn't
work then you can try everything you can try to forward for a sash you can try the forest star and you
can try the minus minus.
If that doesn't work then you should go ahead and add the semicolon at the end and again try for a torrid
slash forward slash star minus minus and the hashtag.