So let's quickly jump onto the first technique, which is a squirrel shell.
Now for this, we are going to run a squirrel map and we are going to execute the command.
And we are going to execute the command, which has been shown below, which is Bitan Eskild murdered
by Hyphen U.
Which stands for the YOU.
We are going to give the order, the custom indication point or the indication marker.
And then we are going to give the Schuylkill using the command hyphen, hyphen Ezekial hyphen Shell.
All right.
Let's move ahead to the practical time and let's see how can we execute this.
So we are going to perform this on to a life target of Dutch government and let's see if we are able
to get the Escorial shell.
So in this video, you can see or hear the command that I have already given.
And this is our target.
I have already identified this target to be vulnerable.
And you can see I have added a star at the parameter, which is idee.
Badge means I'm going to execute all the command, so I want a school map to take all the decisions
and do not prompt for yes or no, I want to do banner grabbing as well.
That's why I have written banner and I have written hyphenation, always hyphenation and hyphen Ezekial,
hyphen Sharelle as well.
So if I can get away with level or if I can get a skill level.
So let's see which shall do we get into this target of application so we just need to hit ended and
you can see Eskil map has successfully started.
And you can see we are able to successfully get the shell at the bottom of the screen over here, the
back end DBMS is minuscule fetching the banner and you can see this is the output because of the command
that we executed, which was Hyphenation Bandit.
And we have grabbed the technology that has been used onto the target of the Observer.
So we can see it uses the operating system as Linux.
The webapp technology is engineers and Plaschke the back and DBMS is my skill greater than equal to
5.0.
We are not interested in to the banner that we have grabbed what we are much more interested in my skill
shell and let's see if we are able to execute any commands onto the shell of the server of the database.
So I have written very simple three basic queries that I'm going to perform not to harm the target of
application server.
You can execute as many as commands you want onto the target server.
But keep in mind, we are not going to update, delete or modify or alter with any data into the database.
So first, let's quickly ran this command in which we're going to tape select three Grasstree from dual.
Is there is a spelling mistake from Dee, I have added a deal with you, so which is a spell error,
so let's fix that and execute it again.
And we are going to see the output of three.
Grasstree, which we are going to get, is nine and against, which means that we are able to execute
our query onto onto the server.
Now we are going to execute these commands, which is select staff from Project Stable or select staff
from users.
So let's quickly execute this command and wait for this to execute.
As you can see, fetching current database, fetching columns from the table users into the database
Albatros and completed it did not return any output because there is no such people with the name users.
So this was we got nothing because there was no such deal.
But I know that this database contains a table which is projects, so I'm going to change it to projects
and it ended.
And you can see they successfully started retrieving the database from the table projects.
So this way it is going to show you or dump all the data from the table projects.
So I hope you guys understood how we are able to get the Eskil Shell onto the target of Observer and
we are able to execute our commands.
Now, keep in mind, whenever you are doing testing or bug bounty hunting and you get the skill level
access or the access to any target application, I would highly recommend not to execute any malicious
query or command over there to update, delete or modify any content onto the server.
Obviously, if you have got the will shell, it is going to increase the impact and target organization
will automatically understand it, but you should not execute any harmful command and just a very basic
command to explain what is the shell excess.
So I hope you guys understood.
Thank you.