Hello, everyone, and welcome to this video.
So in this video, we are going to solve one of the ESKIL injection lab that is provided by the Port
Swigart team.
So we have already seen how to sign up under the security academy, guys.
This is one of the very good resource that you can utilize to brush up your skills for bug bounty hunting
and penetration testing.
All right.
So here is the first lab.
And let's quickly solve this.
So the lab sees a school indication of liability in their class, allowing a retrieval of hidden data.
Now, this lab is based on the previous videos that we have seen.
So we are going to utilize our that knowledge in solving this lab.
All right, so you can see or hear this loud contains a ESKIL indication, one liablity into the product
category filter.
So the one level parameter is category.
When the user selects a category, the application carries out an actual query which is given below.
So you can see the actual query is also given now to all the lab performance scrolling action attack
that causes the application to display the details of all products in any category, both released and
unreleased.
All right.
So the motive of solving this lab is to see all the products which lies into the categories, which
is even unreleased.
Perfect.
So now we know what is our aim.
So let's jump into the lab and quickly solve it.
For that, you need to click on Access the Lamberton and it will just take a few seconds to bring up
the lab for you.
As you can see, we have successfully started the lab and it looks something like this on which there
is a shop we like to shop.
So perfect.
Now, if you remember in the question, it was said that the product category is the one rebel point
or the injection point.
So let's choose something from here.
I think this is the product category.
So let's say we click on Clothing's Choose and ethnicity or let's say we go on food and drink.
As you can see, we here we have three products right now onto our home screen.
And these three products are the first one, the second one and the third one.
Now, let's identify if we are able to see all the products here or not.
But now we want to see those products which are not released yet.
So what to do?
So we are going to use one query that I have written.
So let's just copy paste this query and paste it, and then we will do the breakdown of the query and
hit enter.
And you can see congratulations.
You have solved the lab and you are able to see all the products that were hidden or were not released
but have been successfully released now.
Or you are able to retrieve the data from the database of those products, which was not released.
So let's do a quick breakdown of the query.
So what is the query that has been fired in the backend when you try to go onto any category, reselect
start from products table where category equals two.
So category column equals to gifts and released column equals to what this basically means to show only
the products in a specific category which are released.
But we have used this query which makes the condition as true, and we are able to retrieve the sensitive
data from the database in which we are able to see those products which are also not released.
We have already seen a couple of videos in the previous elections in which we have the deep breakdown
even using the table to understand this query.
Similarly, you can use this query as well if you do not want to comment the ending part of the query.
And this would do the job for you as well.
So I hope you guys understood this and we have successfully solved our lab, number one.
Thank you.