Hello, everyone, and welcome to this video.
So in this video, we're going to discuss about a school indication as to now we have already discussed
about what is a school, how to create your database and how to write your own queries.
Now, what is a squirrel injection, so when any attacker is able to interfere with the queries that
the application makes to the database and can successfully retrieve any sensitive data from it, then
it is known as a skill injection.
So basically, the attacker gets the capability of the retrieval of the database names, the tables,
the columns, as well as the database.
Also, the attacker is able to get the shell of my school or any database, and sometimes that always
shall as well through which he or she is able to execute commands onto the target server.
All right, so what is the impact of a scale induction?
So you must have already guessed that if any attacker is able to get the sensitive data of all the users
from the server, then obviously it is going to be of a critical impact.
Now, if the attacker is able to successfully identify and exploit SQL injection into any target, then
it can lead to unauthorized access to sensitive data that can be password, credit card details, etc..
He or she can also perform authentication bypass into multiple applications, which we are going to
see in upcoming videos.
But I will show you without the correct username and password how you can login into any application.
Attacker can also retrieve the hidden data, which is not available for the public to use or see subverting
or modifying the application logic as well.
So the attacker gets in control of the MySQL queries and he or she can modify how the application is
going to behave from first point to last.
All right.
And the last one is he or she can also execute commands onto the server, which is most dangerous.
So this gives the capability of modifying the database as well as the deletion of anything from to the
server, which is, again, of high critical impact.
So what is the severity of Escorial inaction?
You may ask, so it is considered as a P1, which is priority one, which is critical vulnerability
on crowdsource platforms like Backroad Integrity, Sinak or Hakone, and also the crisis code for a
successful school in action is considered to be between nine and 10, which is a critical vulnerability.
So how are we going to test this all the way?
Should I actually look for a school indication?
So this is known as injection point, but actually you are going to put your payload to identify if
the application behaves in a different manner and you successfully identify if the application is vulnerable
to a single injection attacks.
So work and the query be injected.
This is the question that arises to my mind so far, a successful ESKIL injection, the injection point
can be in the get request or in the post request, in the headers or in the cookies.
So basically you can identify a small injection anywhere and everywhere into the application.
OK, so how are we going to approach first of all, we are going to force the application parameters
so any application may contain one or more parameters in all the you are.
So first of all, we are going to force the application parameters, get a list of more and more parameters
using Spider as well.
Remember, when you are doing spidering, you're increasing the scope for the target application for
identification of more and more abilities.
Now, out of those parameters, we are going to identify one of the indication parameter, which is
basically nothing but a variable component or one rebel parameter into the application.
Next, we're going to check for one rebel component.
If the application is one rebel through that parameter whenever we are going to pass our ask queries.
Now, once our queries are getting executed onto the target, well, we have identified the parameter
is behaving in a different manner when we are when we are giving special characters the time and we
are following those specific parameters.
After we have identified that we are going to attack it with injection queries and successfully exploit.
So I hope you guys understood.
Thank you.
In upcoming videos, we are going to see the practical of how you can basically perform a skill in addiction
and tanks.
But this is the approach that you should have in your mind whenever you are going to practice for a
skill injection, attacks on any Web application.
Thank you.