Hello and welcome to this video and this video, we are going to see a security breakdown along with
a query breakdown.
We are going to see how to bypass or how to perform a injection.
The logic is going to be clear in this video, how to an attacker perform a skill injection on to any
particular application.
So let's try to understand this committee.
Select staff from student, where you are the school name equal to admin and you underscore plus equals
uman or one equals one.
So I would recommend neglect this part for now.
Try to understand this much of query this.
I am repeating this query again and again in all my videos.
So this gladis means select all the details from student table.
When you underscore name column equals admin and you underscore password column equals human.
That means filter out all the details from the student table, whose username is admin and password
is human.
While the square is executing, it will take for the following details into the column, username and
password if.
The user name column has admin as a user and human as a password, if both the conditions are satisfied,
then the query is going to give us the output is true and is going to allow the user to enter into the
application.
Otherwise, it will not allow, as we have seen from the table, that and will only allow the user to
enter into the application if both the conditions are satisfied.
Otherwise it will not allow the user to enter into the application.
So being an attacker, what an attacker does is if he or she doesn't know the password, so at the place
of password, the attacker is going to put this as a payload uman single code or one equals one.
What does this mean?
Let's break down this query to further.
OK, so the user name is admin and password, which the attacker is passing is human.
But according to the student database, there is no such user as well as there is no such password into
the table.
So username geeves false and password also gives false, but take the place of password and to the input
field.
The attacker has inserted something else as well, which is all one equals one.
So all will behave as a logical operator into the query and then it is going to perform something which
is true.
One is always equal to one and it is always going to give you the result as true.
So this query will now become false and false.
False and false becomes false.
False or true becomes true according to the true table.
So this is how the attacker gets into the application without knowing the correct details of the user.
We are going to see this practically into the next video.
So no need to worry if you didn't understood the whole thing.
Thank you so much.