Doesn't want to see what his final immunity, final approval would be is very important when it comes
to a security official to find the problem with these applications and in many ways dispensability depends
entirely on purpose that allows an attacker to upload a fine hiding malicious code inside that can then
be executed on the civil and able to put speech in to the website or defreeze the website on that community
and turn this over to others.
And some justice to sensitive data might be informed by unauthorized people.
And if the page allows users to upload an image that the to to the to some coding and check if the last
character on the file is to go on to be Bingy before allowing the image get uploaded in.
So this is how this.
Final approval will be on a particular website and how to exploit it.
So let's see here in our digital machine.
So let's get to the upload section.
So as you can see, this Web site allows us to upload something.
Let's go to the browser and I'm going to upload this by photo and just upload so as you can see here.
So this is the part where this file is uploaded, so let's see, it is uploaded on server, on our server,
not just copying this.
Copying this Lincoln is pasted here, is presented, as you can see, it is uploaded on a server back
here.
So as you can see here, the code in the code, there is no filter is here.
OK, so you can upload anything.
So I'm going to upload Sellier BHP sell how you can upload Pepicello, so let's create a sellier.
So I'm going to use a tool and really sort of see how it works this collectively and it will show you
how you can make use of this tool.
As you can see, error tammar and if you want to generate new Ajin that is new file then you should
use this.
Come on, let's try this on Lavely.
OK,
generate and you have to put password.
I'm going to put one, two, three, four.
And the part where you want to save the file and I want to save it on next up.
I just named the file.
OK, I thought BHP ok BHP press enter.
So they can see how the fight is.
Don't another next jobs, so this is a fight back to the machine, let's try to inject straight uploaded.
Next stop and we will open.
So now click on upload and it is successfully uploaded, so if you want to see it is uploaded on copy,
the path is based here.
And just enter so you can see the blank screen.
With Whibley, it is uploaded on our site, you can see it if you want to just make Hansing with this
Lavely.
So this come on.
You should use Pavle and I have to put the all you all on the uploaded file control.
All control.
See that's pasticcio.
And password, one, two, three, four as presenter so they can see your connected with the file.
Now you do know what you can do, whatever you want to do here.
So I'm going to use Linux.
Come on.
Let's see where I am.
BWV So I'm currently in this directory, so let's see list.
So these are the things we said, which is in my desktop.
So if you want to see these and these are the things that is suing you.
So now let's see the I.T. order to see the you name that is Leena's Modeselektor limousine.
If you want any kind of help from this press, help and presenter's with these many commands you can
use.
So this is how you can exploit the vulnerability.
So to drive by increasing the security.
So it is medium and just summit, so you can see we just made the security to medium and let's try to
upload that particular share here.
OK, so we have the sensitivities and this open and this can upload.
So it is showing me that had already sent.
So it is showing me the morning and it is asking me to upload image.
So let's try to upload image that it is taking image or not see this and upload.
So yes it is.
Except the image, so let's try some blackbox method, so first of all.
We have to see.
The source code, if it is available, then if it is not, then you can use blackbox texting.
So as you can see it, it is just allowing us to upload only Jopek twice the straight.
So first of all, we have to.
See, we kind of in which kind of request that is posed with requests, so we have to open our box so
that we can intercept the request and then we will modify it on this click on the box.
So it is opening.
So as you can see.
It will take some time to just open, so before doing this, so as you can see, it is not taking off.
So we have to make some changes here.
Now we have to just rename it so.
And press enter, so it is now Cupido fine.
OK, so now let's get back to Amazin.
And Bob suit, Bob Suit is opening and it just now front of us to start, Bob.
OK, so before starting is just make it to.
Please just make it to.
Manual.
OK.
And then get back to it so you can see.
Starting up.
This is a very powerful tool.
So just go to proxy and say it is fun and let's upload the file again.
Is text of Senator GPG senator.
So it is an intercepted request.
So, as you can see.
So this is a sell out and try to make some changes here, too, because in the last we have so that
you can see your content, only these two things can be acceptable here.
OK, so I would change it to be Rexy or Spinello.
Forward the request, their suit as.
It is uploaded, so this is how you can upload any particular file on a particular website if it is
filtering something so you can use this kind of technique.
It depends upon your mind and your creativity.
OK, so now this is all for this video.
And one more thing.
One more thing if you want to just start.
If you wanted to start.
Contacting the desk if you want to just contact the server, so you have to see.
Forward.
OK, this copy the order and it's open revealing is the earlier and just password.
One, two, three, four, Santa.
So you can see they really started.
So now you can do whatever you want to do.
You and you can just run any dysphonia.
So this is what I want to try to teach you.