Now that we have successfully injected come on in low and medium security, but it's time to see on
high all we can say impossible.
So why it is impossible.
Why what Dolapo did there so that we are not able to get inside or Galina's discussion using some comments.
OK, so now let's see Comisar.
OK, first of all, we need to change our security to high.
So we are currently on high.
So now let's get back to my institution, so guys, in this lecture, we are going to see and analyze
what is the perspective of a developer, what did what they are doing here so that we are not able to
get inside it.
OK, so we are not able to get to see all the files and all we did in the last some videos.
OK, so this is the field of IP, not just try to enter the IP here.
Now hit enter.
So often, and as you can see, the spinning, OK, so now let's try to do with this.
This come on.
No.
So you have entered an invalid IP address.
So what it is doing here is this is simply supposed like this is a common knowledge try to do this with.
So what it is doing.
This is reflecting the error, which is you have entered the invaded IP address.
Okay, guys, so now let's analyze its source code.
So when you see.
Let me get.
Bigger.
OK, so this is the source code that I have.
OK, so now let's analyze the source code, why it is not picking up inputs.
So this is what if some type.
OK, so now.
This is a function which is tribalists, what that means is strip.
OK, I saw this dysfunction is doing here.
What this is doing here, this function simply removes the back in the string and returns the string
with the EU back.
OK, I saw this function is doing here.
This is a function here.
What this is doing, this is simply removing the backslash in this string and reduced the string with
the stripped back.
So now one more function that we have that is explored here explored is the target.
OK, so this is the function that we have here.
Now, let me scroll down.
OK, so this is a function explode.
So what it is doing so this function breaks the string into an array and returns an array of strings.
So the parameters separated specifies where to split the string and the parameters string is the string
to be split and the optional parameter limit specifies the number of added element to return.
So what it is doing here.
So next, what we have here is, you know, we can say, yes, this is a function is what it is doing.
Yes, this is also a function.
So what it is doing so this is simply checking if a string is a pneumatic or pneumatic string, if it
is true, otherwise it returns false here.
OK.
Because as you can see, it is inside.
If so, what we can conclude from this.
So the conclusion is that it can be seen that the this security level code is like impossible and this
simply adds the NPC sarap tokens and the parameters.
IP is strictly restricted here and only inputs such as digital, digital, no DOT, no will be received
and executed.
So there is no command execution of winnability inside it.
OK, guys, so this is how.
You can simply securing a Web site using this.
OK, so now let's get back to it so you cannot exploit this.
You cannot take advantage of the winnability because developers is playing.
That developer has a great job here.
So this is why how you can exploit any vulnerability related to communication by using by playing with
the operators.
And if it is like if a developer did the great job.
So you cannot find any kind of an ability because they also have the.
OK, guys.
So this is how you can do it.
So this is all about constitution from the next election, which we are going to start with some other
winnability.
So this is all for this lecture and thank you.
What?
In this lecture?