And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
this video will cover.
If I attack.
We are going to introduce you.
What.
What's all about this attack and how it works.
Attacking our if I will know what applications and the countermeasure we should be taken so that we
mitigate this kind of attack.
Yes.
So what is it exactly MFA is having no ability phone and Web sites that are attackers to include that
we would file on the web server.
This may lead to some remote code as a cushion and fulfill a compromise of that system.
In this attack again little girl or the adversary can try to include some files so that it gets the
access otherwise it access to a particular Web site target or some stuff that here we provided some
definition.
And then in this image so it's it's the design of how it is at that point.
But first thing first they include a function in peace.
I lose content from locale or fires to be executed in any script at one time if it's to be from real
code.
No it's not.
It will not be about out of the road.
And if I recall five inclusion are lots of web platforms are vulnerable to this kind of attack.
But the big platform was much much compromised to this particular attack.
Let's say just in just a few quick view what do we have to be a really good notable or reliable.
Well they were not all.
And then here is the index.
Fine.
And along and BHP is created equal.
It's a newly instated contact with BHP.
So here mostly they can get Ackroyd here.
And despite we going to explain how it goes unsorted minimize it it's minimize it.
OK.
As we said earlier.
So isn't it targeting vulnerabilities in application that dynamically France's external script.
All right.
How did this attack work.
First thing for us to use is a search engine to identify a website with a vulnerable component.
How this can happen.
Okay.
And I can use Google search engine or stop page or don't dog.
Some something like that.
So the reader to mine that he identified your Web site would renewable component he looks for it okay.
The attacker use a scanner to do it to do identify a website with a vulnerable component as we have
explained earlier said so that's why we we use privacy proficient on scanning because we have the options
of lives Gunny.
So when you click the left coming in on purpose in the brochure professional.
So there you can just copy it went blank and posted that and then tried to penetrate it so that you
didn't if exist some vulnerabilities inside of it.
All right.
It's not gonna do to scan website that you don't own.
Guys always penetrate to what you are only.
All right so here the Expo.
Do we want finance.
Do we modify inclusion of vulnerability to put it back.
Share.
In this part D.
This site is compromise and my motto is style pages defaced or deleted here.
Anyone can go to that website and then since that website has indeed a model which is.
So every user that went to the website is renewable because it depends on the attack on detail of the
attacker what what he wants to get.
So but since that model is installed in that website.
So this is only critical.
Server is hijacked.
Silver is included a d d all s but Silver says I'll compromise it to guys I'm telling you.
So what is the deal as it was is not.
There is nothing as and distribution of denial of service but that means the attack the attack is from
multiple of computers or devices to be simple data is compromised.
Password information are stored in your information might be credit card all your birthday all you'll
see where you're living even in stuff right.
All right.
So let's go future.
Okay so let's show you let's review each year in this fight.
In this link insulin is what the attacker can do.
He can just try and do two ways.
The content appears and then put their GP and then east website.
Let's say even dot com.
He put it there.
You will put a very strong payload so that he can stream your sessions so that he can steal your password
Eakins to anything your location any very sensible information.
Let us show you at our clients you know your book code build on BHP.
You can take it very simple code and that OK.
And then you typed in code of silence was.
Okay.
You mean that page would be doing this in report codes.
Thank you.
Well what this group will do.
This particular code is taking some page which is included into this page so that he can pill form a
remote control of that website.
Since this website is good news.
Okay so all right.
Okay let's minimize it in you know what fits.
Let's go over to Dakota overview of what of what is the difference between our fight and NFA.
Similar to edify it is the NFA is Earl qualified in.
It's a kind of it that involves offloading some payloads fire to the servers.
If you are aware waters for example the attacker seen as a detect the vulnerable website.
After scanning.
So now he can try to upload some payloads fight on to his Web Wasser so that he gets access to the web
server.
So editorial tools are often references together in the context of inclusion attack.
In both cases a successful attack we sought in marriage would be applauded as we have said earlier that
targeted server.
But however unlike our fight and if I an to exploit insecure locale file upload function that that that
functions but failed to validate user control input.
This is a very crucial aspect for any programmers or any kind of cybersecurity guys will want to do
or want to make sure that it will but the kitchen is safe.
You always have to take in charge your input validation sees your web server cannot face or can that
resist to some files input or so characters input.
It's it's very crucial because you have to sanitize your application first.
I mean you freely do it.
You proofread some kind of file from being uploaded to your server.
You've proven some kind of characters to be inserted into a neat space which which can get access to
your servers.
For example in search field you you restrict some characters from utility so that you can resist to
the obscure ingestion attack.
Likewise you sanitize it.
You will be able to even be able to even fight against it if X is attacked.
It's the six of us.
It exists.
There is a course sites cross site scripting attack which is must be in three phases.
We have him it is a sex attack and then we have reflected as a sex attack.
We have attacked Dom.
This isn't a permanent attack is like when the adversary or an attacker try to try to get access to
a server while uploading files it defines the DL in the vulnerable website site for instance in info
on Web site.
So the attacker can inject some payload there and then that build on stay there.
Whenever any claims or any other user go through the page ended it automatically the payloads of the
attacker get loads and the user automatically gets into that trap.
The reflected excessive attack it can be done mostly by email.
Maybe met so the attacker send a victim email and then incites Amos to click on that email and automatically
clicks on that email.
That email might redirect the victim to another page and then this is exactly how they're reflected
as a sex attack.
And then in that redirected page so it has some kind of payload so that e gets what he needs.
For example location or position of cookies and stuff like that and then did Dom access is quite the
same as they would've rented SS is attack but the only difference is that in the dome existence it never
reaches the server site.
Okay so let's close this chapter because it's none of what we are talking about now.
Okay let's give some example.
As we stated earlier it be a GSP payload might be containing GSP include page in string with case the
get go and we do it so that that's the problem with the detector ones or it can be documented get location
and stuff like that.
So whenever the victim go to that particular address so the attacker gets what he needs from him.
Alright here guys.
You can read much more information about it how to sanitize and put some inputs but in this field we
are going to just choose an example of if you were working with a P2P fight.
Let's go to your site.
It's easy to heal.
You can take some counter resume flexibility to measure.
All right.
So what do you have to truly validate the user input.
This is the first thing to validate somebody's beating the user's input.
This is very cool shot because if you don't put some kind of filter some kind of filter is some kind
of sanitization against the user's input.
I'm telling you guys you'd get into the trap because attacker first thing first that he wants to try.
If you want sanitize it and then if you ask not sanitize it you will take advantage of that.
And then the second thing so you can set a low said.
You were an.
If Ukraine threw me off in a row and I know you were included to begin off to be off to the 0 4 guys
in your PSP configuration.
Fine fine fine fine.
Which is being the key here.
You in your back inside.
I mean you know dashboard as an administrator.
You don't have to said.
This file to me order otherwise attackers will take advantage of it looking for much more information.
You can click this link to get the origin our website address to learn much more information about it.
All right.
So that said for this video guys we hopefully that will expand you really well.
What is exactly about.
If I attack in how it works in the countermeasures that you have to take while you are as a developer
or as an administrator of or or some website if you are working there you have to bear in mind this
this implementation should be taken first before breaching the website.
Okay.
Thank you.
And seeing you in the next video.