So, guys, in this lecture, we're going to see our excesses reflected in a medium settings to, as
we all know, high as the impossible, but we are going to see that also in this particular lecture.
So now let's try to exploit our excess reflected in a medium setting.
So what you need to do here is you need to simply, as we all know, that this is reflected once or
it will not be stored on the server side.
But what you need to do, it is simply click on setup, create and release a database or data which
has been created.
So now let's get back to security and change it to medium summit.
And now we are ready to go with access as reflected.
So, guys, I found one more website which is not trustable in case of Accessors because this website
is the owner of BOPE.
So OK guys, so this is a website which simply contains hundreds of thousands of payloads inside.
It's you can go with anyone and it will definitely work.
Its up on the practice which one is fit for which one is for this thing.
So it's up on the practice.
So now guys, let's see.
So currently we're in the medium setting.
So what it is asking, it is asking for the name.
Now I give help.
So when you deploy, as you can see again reflecting whatever I'm entering here.
OK, guys.
So it is the same thing you can see here.
So now let's try with our basic scripting, which is a script has been HOGGE.
Now let's try with this.
So what it is doing here, what you have entered inside the island and with a load, it is simply reflecting
that particular thing in front of you in the webpage.
So what is the problem here?
So now let's analyze with the help of a few source so that we can easily understand what it is doing
and why it is doing.
Let me move this here.
OK, so now we're having full court.
So what it is doing.
So now let's see here, as you can see in the Echo, hello.
It is printing.
Hello.
Is this this thing is very true to says hello.
And this button, please script.
What is doing this is they are using one function to replace a script.
They are simply reflecting, they are simply replacing a script with this.
So that is why it is not working, because we have entered their script oxidise.
So the payload that we have entered here was this.
So, yeah, as you can see, when we see this, what they are doing, they are simply replacing a filtering
script.
OK, so now how we can simply bypass this particular filtration.
So now when you see this, you will see that they are reflecting as see IBT this thing in lowercase,
they are simply doing this.
So what we can do here, we can make it like we can make access capital.
Let's move in the front.
Let's see is it will work or not as we have changed it to capital.
Or let's try to run this.
As you can see, we have successfully managed to exploit excess as reflected with the help of some changes.
So this is how you can simplify it and you can see it.
So now let's see what we can say.
This one.
So this is the command says the payload that we have going to based here.
So now let's see, is it working?
And also, when you run it, it is it will not work because they are simply filtering escaped.
So now let's make some changes like I want to make I as a capital.
I is a capital in each and everyone, let's see, is it working or not?
We have to make a script every time capital.
As every time capital, OK, what is the problem here?
Let me again see.
And this was the comment, I think this was OK.
So let me copy this.
Again, get back to this.
Copy paste.
Let me move my closer to the starting years, Access's on, often executed.
Let me see what it's going to work or do.
Let me change this one to X.
This is not a straight run, this now, as you can see, we have successfully managed to exploit this
winnability using some changes.
OK, so this is how you can work.
Suppose that you are working in a real world website and when you try to inject your code, but it is
not taking because it is already filtering.
So you can do these kinds of changes so that it will later on work.
OK, so now let's try to exploit it on high.
So when you click on High and click on Submit, now let's try to get inside this and simply choose this
one, OK?
And now let's make it as capital.
Noncapital, not attender says, you can see that what it is doing here, it is simply putting all the
things, whatever you have entered inside this box as a string and it is just displaying yours.
Now, let's see what is inside of your source.
Now, let's make it zoom because time to see it and very soon manner.
So now, guys, when you see here.
Hello.
So what it is doing here, it is simply esteemable, is special.
Got what it is doing here.
It is simply converting your things inside like stream in and special characters supposed like let me
suppose, like you're using this particular tax, it will convert it into a of space.
So this is why it is not working in this case.
OK, guys.
So this is why impossible high is just next to impossible to exploit.
So guys, as we all know, that if there is high security, the developer is very creative and very
deep thinker or they are well known about what kind of filtration they should be, simply put there
on the website.
So you can not exploit that.
So that is why this is the perfect setting.
With the help of that, you cannot you cannot exploit excess unreflected.
OK, so this is all for this lecture.
I hope you guys enjoyed it and you know how to exploit accessors reflected.
So thank you for watching this lecture.