In this video, we are going to see another payload for doing a squirrel injection, so the query remains
the same.
Your select start from student where you name equals Edman and buzz equals single and single code.
Whatever the user is going to enter is going to be appended a word and a real.
So whatever username you are going to enter into, the application is going to go and up and over here
and do the ready and whatever password you are going to enter in is going to depend on where you are.
And this single cause, I assume, is already been there, kept by the developer.
So they will have to make sure to balance this single code as well while we are entering the payload.
That doesn't text becomes perfect.
So when it goes to the database, Alberghetti should execute.
So you're I am entering into the user name in Berfield.
I am putting admin and at the place of password I am putting this payload, which is a single code or
one equals one hyphen hyphen Soyo.
What does this hyphen IFN mean.
Hyphenation is commenting the rest of the query.
You would have seen this double slash to commend your programmer code while you are using any other
language.
So Enescu Elby Yusaf and I want to commend the rest of the query.
So this is all.
My last single code is not functional because it is never going to execute because of the hyphen hyphen
comments to not executable query is something like this, which is select start from the student where
username equals admin and password equals nothing or one equals one.
So let's break down the squaddie for the you name equals admin and password equals empty court or one
equals one and rest of the things that already been coming to.
So you're I am assuming that admin user also doesn't exist into the student table, so it is going to
give me the output is false and password is empty again, it is going to give me false and all is a
logical operator.
After that we have four.
One equals one, which is always a true condition.
You can use a equals a big will be two equals two, five equals five.
Whatever you feel like.
Our intention is to make the query is true from your so you name equals admin which is going to give
us false and password equals empty is again going to give us false or one equals one is going to give
us.
True.
So let's evaluate this thing further falls and false will result in false or true.
False or true will give you always true.
So after the execution of this query, the database is going to allow you to enter into the application
is the greatest result is through.
It is only concerned that if the result is true, I'm going to allow the user to enter into the application.
If it is false, I will not allow the user to enter into the application.
I hope you understood the breakdown of this second ballot.
So in the next video, we are going to see the practical of the same thing, what we have discussed
in this video.
Thank you so much.