Hello, everyone.
So in this video, we are going to see one of the LFR one liability onto a live website site, so let's
quickly see how we can identify a basic elfy onto any target and how can we exploit it.
Remember these type of elfy when liabilities are generally categorized as a P1 and a P2 based on liability,
which holds the severity of critical or higher.
So in case you identify any elfy based on liabilities into any target, make sure you report it as soon
as possible so the chances of getting duplicate becomes less.
Let's see the practical and understand how you can identify LFA venerability into a life target, so
far this what I have done is I'm going to choose this particular target, which is crown oficial, dot
com.
So once I went to this website, what I'm going to do is I have started my website as well, and I have
already called the audience.
And you can see here are all the audience.
Now, let me start it again.
So what I'm going to do is first I'm going to reload the Stargate so that I can get the you all into
my box.
But now I'm going to utilize this.
So I'm going to send it to repeater and turn this off.
All right.
So I have the request into my box, you know, and you can see this is how the request looks like and
this is the response.
Now, one of the spider crawls that you all saw in Bob's Your Community audition for 20/20, there is
a passive crawler, which means you have to manually go to each audience and it will automatically bring
those Yarl's into Bob's suit.
Or else if you are on to Bob's youth community at one point explosion, then you can run a spider,
which will automatically spider all the yards for you.
So right now I'm into boxcutters in 2020, so I have already called the audience by going on each length,
one by one.
And let me just show you, how does it looks like.
So you can see over here, these are all the audience which I was able to passively crawl and bring
to bear.
Now, let's do one thing.
Let's take one of the model, which is let's say page equals to contact DOT.
And let me send this to the Peter.
As you can see, I have this URL and the get request in my repeated up and I hit send and see I'm getting
a response for the contact dot BHP.
Now what if I say instead of contact dot BHP slash ATC slash bus W.T..
For those of you who do not know what is E, it is a possibility.
So this past a bloody file represents the number of users into any Linux based system.
Let me show in my computer.
As you can see over here, if I try to get it, possibly you will be able to see all the users that
belong to this specific computer.
So these are all the users that are running into this specific system.
All right.
So now what we are going to do is we are going to see the ADC slash past a bloody file and let's see
if we are able to see the users for the current official dot com server.
Let me hit send.
Let's see the response, if any, where we get the pass W.T. fight.
And you can see over here, the past of fight has successfully loaded.
And we can see there is a root user and there is the current official dot com, one more user which
has been created.
Now, let's see, the shadow file is hit send and let's see if we are able to see the password for any
of the users that are being created.
And you can see we are able to see the passwords as well.
As you can see, these are all the default users, which is staff guest, SSL, admin database, etc..
So this is it for this video.
I hope you guys understood how you can do a basic elfy onto any target by just including the payload,
which is slash ATC slash pastor or slash ADC slash shadow in one of the injection points.
Thank you.