Hello, everyone, and welcome to this video.
So in this video, we are going to see some of the very useful resources that can be used for broken
link hijacking, how expired links can be exploited.
All right.
So first, let's quickly see stored broken link a hijacking.
So this way the attacker can do impersonation of the company's account.
It can be social media accounts or any other account that are pointing to different platforms like Instagram,
Twitter, LinkedIn, Pinterest, etc..
Secondary is external G.S. file hacking.
Now, this is very, very simple.
So let's assume the target of Web application has this particular code in which they are loading a script
for from example, dot com script, not just now for some reasons.
That example, dot com is a cloud service and allows us to put our gas code over there.
So this link is not working anymore.
Let's assume that so we are able to put our code over there.
And when the target overapplication load this year, which is the JavaScript from the example dot com
at that time, it is going to load the attacker control malicious Geass file.
So this way we can take the example dot com or we can decode the name of the same file which has been
uploaded and control the JS file, an example that EDI, which is the target of an application.
This can also lead to information leakage.
In many cases, all the links which are supplied into the order or these types of parameters can easily
be taken over.
There are many instances when companies still link to expired analytics speech, and this way, if we
take over the analytics page, the attacker can monitor traffic and possibly get a lot of a valuable
information contained hijacking and also within wherein we can hijack the malicious content and serve
our own malicious content.
Similarly reflected a broken link hijacking in which all the parameters like traffic and source attribute
contains the links which are that can easily be taken over.
For example, if you see examples in radio over here, the CDR example dot com serves cryptologist and
if you are able to take over that, we are able to serve our malicious content or malicious file.
While it is kind of the same example that we have seen previously.
So some of the tools to do this, obviously it will get very, very difficult to identify each link
on to the target web application one by one to see which one of is working on which one is broken.
We cannot do it manually by clicking on each link for the identification purposes.
So for this, there's a very awesome tool called Broken Link Checker, which we are going to use right
now to identify the broken links on any target application.
So let's quickly go on to that link.
And you can see this is the tool now to install this tool, you should have NPM and start your required
Narges so you can install Narges and you can just copy paste this command into your terminal.
Now, once you do this, you are ready to run a broken link or in short, be.
So let's copy this.
Come on and let's it into our terminal and let's see what happens.
So you can read more about the tool and the documentation from here, and you will be able to know a
lot of more options that you can use.
All right.
So let's quickly copy this and paste it onto our terminal.
So.
Now, you can see over here the filter level is sorry about that filter level is three actually broken?
Not as articulate what X, Y, Z.
So I will hit enter and it will start identifying each.
Link one by one, it will start identifying each link, one by one onto the target web application and
really audio if it is OK or if it is broken, as you can see over here.
Now, one thing to notice over here is let's say if this link is broken, as you can see over here,
because there is no G Carousal dot file into the server, but we cannot take over this because this
file is actually uploaded onto the main target subdomain or that main target server in case you are
able to take over broken X, Y, Z using subdomain Tekoa, then you can solve the malicious content.
But for now, if there is no subdominant or vulnerability, you cannot serve the malicious content which
is hosted on the server itself.
So let's try to identify some links which are not posted on the same server.
But somewhere else here we can see that we have identified a broken link which is on Lingnan.
Now we can decode this now because this is pointing to a LinkedIn profile which says Take me over please.
So yeah, we have made this wonderful link onto the target server and it has successfully pointed out
that this is a broken link which can be taken over.
So I hope you guys understand how you can utilize this and it will tell you all the broken links into
any target.
As you can see, this is the final finished version.
And you can see these are all the broken links.
We cannot good with this, but we can take away the Lingnan one and we can report it to the Target website.
So thank you.