All right, let's now let's talk about this open to the reaction, suppose there is a backhands group
in BHP and this header Functio redirects to the string specified in this argument.
So if you a header of guru.com, then the site returns to guru.com.
So this is not a vulnerability.
Of course it's a minor vulnerability.
But when combined with Exercice, so this, uh, that you are or the water can be stored on the database,
uh, in Texas, uh, when there is this vulnerability.
So after that, whenever any user visits then that could open the database will execute this redirection.
So we're going to see this, open that and you can change it with Exercice, our decision to write it
down to some other location.
So generally this would result.
Generally this would result in the site defacing, uh, where you can see the site was a different way.
You can see.
So this is open to the action.
They will take advantage of this exercise still Texases and then, uh, they'll use this.
So no header of dislocation.
So first we are going to have a demonstration.
I have put this function to get the value of your order.
Well, then it will be open to the stream location and then put the space and then the page we to this
location.
So this this is a page script and we cannot execute in windows because we do not have Zampa server or
any other page feedback software.
So that's what I'm going to open.
This matters.
But I have already, uh, uh, copied the code you can see here unless I am involved with the UAW.
And if you say get a redirect that page and you can see this code, so.
It's the same code header off the location press and this one you the value of the water available to
us.
Now, let's go to this address.
So actually, right now we do not get any output because there is not any actual statement.
So what we want to do is want to say, questionmark, you are is equals to HDTV.
Yes, that's Goulder.
So no, if I hit enter, this page will be redirected to this Google Rock'em Index, which as you can
see now, Google dot com has been destroyed.
Me go back.
So in this way you can just simply use uh this uh header function if you find any in the background
to identify this as the function or any, uh, taking the input.
Then you can, uh, redirect this page to this, uh, any location you want, then really the purpose
to use the, uh, you order encoding and basis for encoding.
So let's see that also.
So what I want to do is I want to see your order.
So this is the back and forth on the front and JavaScript and codes are generally the browser and codes
into the order.
So in the background that there decode this, uh, this variable.
That's what another one.
OK, now it's perfect.
Our attitude is, so what is your critical function takes the doses, it will take the, uh, value
and it will be the you order and it will happen to this location.
So first, we need to encode our daughter in order to send, uh, in order to make the reader successful.
Let's type in Google your order.
And so let's go to the theater and correct.
That are now based in the holy water you want to, uh, return to.
That's a good outcome and quote, and now you get this, uh, encoding format, so you use this encoding
format to avoid some special characters with greater than less than quotations etc spaces are.
Those characters will be converted to some special characters.
So whenever a server balances this, it will be converted into Corra Ancestress, etc..
So, no, I think we need to refresh this page.
Yes, we have to finish it.
Now, what I can do is I can say you are easy to install.
Able will come back to this.
You are incorrect data.
You can see it should be a singular.
Only some special characters have been modified.
Now if I hit enter, we should return to guru.com.
So as you guys can see, we have to split the router.
So another encoding I want to tell is that is base64.
And so we have already seen bushwalk, but let's implement this in our BHP Malenko.
So instead of you, are the contents of this 64 underscore because let's say this.
So let's go to be 64 and so you can also do this in the bar.
There is a encoding and decoding options in the pursuit of what?
I just you can use this on iTunes as well.
If you are using Linux, there is a pull a message for you can retrieve the group from a group from
the group and also the group from the terminal itself.
So this is a basis for encourage farmers to forego their community colleges and let's dispense to make
sure that our recent record has been included.
And now let's say you order is equal to let's finish this one.
So this will really go to good outcome and then it will be a to location and it will be there.
Now, as you can see, we have successfully to guru.com.
So this is the basic way of open redirection so that our personal, uh, encored two or three times
for security purposes.
Uh.
Like the right combination of this water and the basic Shefford and British foreign water, etc..
So you need to identify how it's going to work.
So if you identify that, you can just, uh, identify the type of this encoding and then you can just,
uh, simply pass that and call it a stream.
So that's how far this video about this open ocean, though it's a minor vulnerability.
You can change it with accesses are more correct decryption.
And you can just simply, uh, redirect anyone to that or your desire to have.