And Lou everybody when it comes to my advanced ethical hacking networking penetration testing goes
this video will cover the concept of a secure injection.
We are going to elaborate on it.
Do it quickly as well as practically calling you action.
What is it.
It's a vulnerability that is firm one on when you have applications.
There there Tucker or the anniversary.
He has only to inject some input so some input codes or some payloads so that he get access to the web
server side.
And while having access that he can manipulate database all he can get control of the full access of
the administration final dashboard.
OK.
So as soon as current edition he's admitted the advantages of how separate into art 0 0 works with it
back and that can server when the attacker gets the information that he needs if he scan your website
and then he phones that his Web site is vulnerable to a school injunction.
He might explode it if he's back at hackers.
He can destroy your website e-mails could any an attack a server is treated in passing is could comment
through their web application didn't get processed and executed by it but in every server in some order
the benefits of a successful attack could be by passing the qualification in gaining access to the data
changing the data modifying need you know to control execution of course made your list of times and
we're told it depends it depends on the types of the database server that is being used to target for
example.
Many many different parts or many programmers already I mean he's tried all they use my askew database.
Some of them use Postgres Kuwait as well but many of them used to use.
Oh I used to have my secure database if you are working in a company or in if you were responsible for
analyzing it to do it when we're told to not.
If your application is noble to execute injection where an attacker might get you into the trap is you
have to go check your local file of your server back inside.
Many employees struggle they don't even know where to look.
Five of these system is located.
It is really quite shocked to know because while you say it'll be the notification of your local filing
system even if you don't set the notification but if you know where it is located you can always always
make a daily check to let you know if your website has been attempted to give information to it now
its source so that you know exactly what kind of attempt has been made on your system.
It's good condition to be done.
Even from browsing a site if it has a database for each auction there.
So you it can also indicate up to a career has been set.
We know mostly three main types of is good in chicken but there do exist much more visually important.
OK.
You will based union based in brain based.
We can use time sensitive weakest and in the description gross although I'm going to elaborate much
more on those this injections that you will beneath.
So what is it.
It is in an infinite secured injection mater that we lies on in one message to one by the database server
to obtain information about this trial to draw into that of the database.
So while the attacker froze the database or tweak the database in it weakest in the database itself
as it Ninos and because he was once set on by his administrator so that he keeps the information to
the user for example he might say we don't recognize this user check this all this user input is not
valid all the data are in my secure query does it accept this thing you know if if your database gives
you gives the attacker some information.
This is not good.
This is really notable when you are really useful which the different phases of the web application
there should be disabled on a life site or logged to a file it was tweaked it access instead.
Ok now we are only part of a school based union based union BS is in being a rescuer in chief Jim Middleton
as well at that leave which near Union Square.
If we were to combine it with a sort of two or possibly even more select statements into a single one
which is then we returned as part of the issue.
We spend it in feeling sure it is good.
We are not going to do it on order we think.
So we give your own boss stuff guys so that you can read it by yourself and understanding the reason
behind dissent.
That is good chicken occurred on the civil side made from the attackers much like bowling bears appear
to survive a quick review.
It's a kind of meta that relies on sending in a school to query the database which forced it which forced
the application to return in different ways depending on whether your query returns it to or fast a
pooling system.
This is true of us depending on the ways the content within its GDP was spent we changed or we made
this then the is there for a story to infer.
You have the parent who is trying to offer us even to know that that form the database is returned but
it gives him very quick information because it equivalent to or fathers.
So this attack is typically slow especially underaged databases.
Since the attacker will need to enumerate databases it determines step by step character by character
like timeline blindness fuel injection.
So it is a law that relies on sending in a school query to the debt office which follows the means is
to wait for is pacified amount of time before we are spending.
This is credible.
And do we spend time really indicate to the attacker whether the result of the query is true of fast
came out or ran out of men intuition.
Isn't that a.
Come one.
But mostly because it depends on the feature being enabled on the database server being used by the
application out of land.
This condition occurs much more when an attacker isn't that able to use this child or ranch the attack
in get away resulted in distinct techniques or for the attacker in a to influential time based techniques
especially this server which spins out fairly under very stable.
Now I met AQ wait I mean so you can find on much more information about the obscure comment to this
land guys.
It's a vote could is important to learn before duty so that you can manage your system practically.
And we're in very one minute attack and will not be sitting and doing attack for more.
They can use automated tools like Smith.
As I said earlier as an attacker.
So I will require you as an attacker to be a good attacker.
I mean being at a group to hack yourself or to penetrate through the system so that you have the knowledge
enough their required knowledge to have your self have their whole world after that.
Okay we have a video with no tools in color limits which is a purpose read news that I see as inbuilt
system because it hasn't the free edition of obviously proceeded there but I would require you if you
can buy the proof we should not impose.
It would be best for you because the book sheet professional has a lot of much more functions.
Let's take a few.
Let's take one example.
If you go to your to your if you want to make a life scanning and then you don't have it Ed. professional
you will not have this option on your community.
Yeah.
So that's why we would require you to buy it or find a way to to get the perps professional.
Or if you want you can.
I can provide you the exact prices exact information how to Harvey because we have it in our proxy but
for the sake of all we knew was earlier so we dated and we downgraded we upgraded we downgraded.
OK so attacker can use proxy warning much as a proxy server.
So our weakest will pass to bourbon birdseed and it will modify that case with windows and if possible
we get to compromise the database and automating to is how the V O age so which can be used in equipped
with terrorists and allowed to test any website for getting the insecure injection.
So here are in d We're billing address it's a site where it's a site.
So there you can try to get the Timor of food vision to test any web page here again to look in court
to all us so that you can find much more information about obscure injection how it works what it is
and how to prevent it out to detect it and stuff like that.
Okay well so can we use it and sort no know if you follow or implement implementation if you use 80
years in IP is 80 as it is the intrusion detection system in IP as this intrusion protection protection
system.
Or you can try to use the web application code configuration to check the size the type content weakest
going to the database in another high.
Obviously we quite who need step to do is always check the user input while you program your site.
I mean while a developer try to code some pages so that it opposed to a particular website because if
the attacker finds a rule you will take advantage of it because if you don't have some sanitization
some filters that prevent the user input so that a particular character can't into the database.
I'm telling you guys you've stuck because if that is me as an attacker if I want to get access to it
and then I find it not so I can might use it in a one way.
So a person can use any one way against you.
You have to be aware of it and then take all of these responsibilities when you are launching a website
so that before launching it you try to analyze it all the pictures over the pages inside it step by
step and try to detect if there is a need for nobody to inside.
All right.
Here we have some some streams that you can use what is called injection and put the one there one which
we like to watch more.
Is this one so input to external brackets to external codes.
I'm sorry.
And then you put one single codes all single codes equal to one D.
External code.
Don't put it in the field.
D don't put it end if Indiana County.
All right.
So if a user name is admin we will bypass the password field like this.
You see you just copy and paste it that end to the puzzle field and then you present it.
If it is good knowable SQL injection it might work.
If it does it we can try to find you.
You can try injecting chrome does things or you can make your own research and then you insert in this
school injection there so that you get access to the system that you have as a target.
Okay so this is some command a semicolon.
It means it is the end of a school stick man.
This one single quote to it was in the close of the school statement.
Double Dash it is a comment is not to go and this comment.
It is also the way of finding stuff like that.
So guys if you get in here you already have the knowledge of the basics.
You have to take before and your upside so to be really advanced.
Use it in testing.
If you want to be a wheel intercom hacker you have to know how to hack what is this.
Be good and everything because what you do on what you would find on it.
So be careful.
Don't attack people attack yourself to hurt yourself.
Don't attack to destroy attack to help and then don't attack.
One thing this is really my good advice that I can assure you that I can that I can tell you that I
can give to you because you have to be good in everything because you know some eat.
It doesn't mean that you have to practice it on someone in your one way.
Oh so this was the part of the tea or tea call.
Information about is called comments.
And in this video we are going to make the practice for obscure injection.
Looking forward to seeing you in the next video.
Thank you.