Let us continue with Web application penetration testing, this is the first vulnerability that they're
going to exploit, that is the command execution and they're going to use the damn vulnerable Web application.
So it is command execution or command injection.
Operating system command injection, also known as injection, is a security vulnerability that allows
an attacker to execute arbitrary operating system commands on the server that is running an application
and typically fully compromised the application and all its data.
Very often an attacker can leverage an operating system, command injection vulnerability to compromise
the entire hotspring infrastructure, thus exploiting trust relationships to pivot the attack to other
systems within the organization.
If we haven't got a clear idea of what this command execution will right now head to our Linux machine
and I will show you how to execute command execution and what is command execution vulnerability in
the application penetration testing.
So you need to do two things.
Start your machine and start using it as political machine as well.
I will see you in a couple of minutes.
So as you can see, I have started a moment, floatable, by giving the password and username Nordea
of to go, you have to go to Carly.
And just log in to your colleague.
Now go to your browser, Mozilla, Firefox, and then since we are going to launch their DPW from metastable.
We'll put the IP address of Matus Portable into the browser.
So just open Firefox.
And then head on to my husband to check the IP address of the metallurgical machine.
Type of conflict.
And you can see the IP address of my machine is ten point zero point two point sixteen.
So minimize this step.
And then in the browser, in the other section, typed ten point zero point two point sixteen and then
hit enter.
Metastable has opened and click to digitally login with the default user, and that is admin and password
is password it all lowercase.
You can see we have successfully launched into the real world application now make sure you practice
all these practicals only in these machines.
First, go to security settings, change the security to law, then click submit and now go to command
execution.
Now, here you can see on the screen that the command execution or whatever it is, the input box is
asking us to enter an IP address so that it can ping it.
So that type IP address of certified hacker and in order to find out, open the terminal window.
And then we know how to find out IP address or just typing certified hacker dot com.
And then hit a window so you can see press control, see to terminate.
You can see the I.P. address is one sixty two point two point forty one point two and six point eleven.
So just copy the IP address, go to your Firefox browser.
And then just paste the IP address and now click submit, let us see what we get.
Oh, it is actually bringing diapers, which our terminal just did now.
So now, since we have to check this for commercial execution when they're ready and you will first
need to know how this works.
So just intervenors.
Come on and let us see if it gets executed.
Let us right.
PWP, that is present, working directly and hit enter.
No, we didn't get anything because it is asking for an IP address.
Well, we should keep trying.
So first time dippie address.
Then type semicolon.
And then take the command to see if this works.
We have got two reasons.
First is the IP address, and finally at the bottom, we have got the president working directory in
which this machine is vulnerable.
Now, you can see that directory is exactly the same.
The yuan you can see let us try another command after probably like type code or else let us see what
we can get.
Well, this is also working, we have got three fires held in Texas, BHB answers, so this is how command
execution is working, basically executing the Linux commands on that server.
And this is really a very crucial vulnerability, because if you're going to execute or if you are able
to execute the Linux commands an attack or a hacker can explode the entire server by utilizing advanced
Linux commands.
So this is how we execute or how to check for command execution.
But obviously the security of this machine or this lab was low.
In the next lecture, we will see how to exploit the command U.S. vulnerability for a medium security
level.