Now, you might notice that I am using a skill injection in the password field, right, and not on
the username, because I know the user name is Edvin, but what if you don't know the username as well
as password?
Well, in that case, we will try a single injection on the user name.
OK, so let's try this.
So let's remove admin and let's say we don't know the user names or type X, Y, Z.
OK, and then we will make it a ESKIL injection.
So singlehood then the condition one is equal to one and then hash.
OK, so let's copy it.
So it's back to browser and pasted.
OK, now the buzzword type, anything like one, two, three, four, five, six, extra hit enter.
Now forward.
See, this time the security is set too low.
OK, so we have successfully lobbied as admin.
OK, now let's increase the security.
Again, we have to forward this request.
Otherwise, we will not able to access to the website.
OK, so as you can see, the security level is too arrogant.
So let's log out again.
We have to forward this request.
Now, let's try Eskil diction again, but this time it won't work as we know that we do the security,
so let's change it to the normal text like ABC.
Yes, and password would be ABCDE could enter.
Now, here now it is the security level one.
So we have to make changes here to bypass plain sight security.
So singlehood again.
Eskil injection.
OK, now let's forward the request and see whether we are able to get access into that website or not.
See, we have not been as admin.
OK, so login is successful right now.
Let's increase security to top OK to level five, which is the highest level of security in our virtual
environment.
OK, and this level of security is sufficient to stop attacks like estriol injection.
OK, so now we have increased the security level to five, which says it is secure now.
OK, so let's logout from here and try to perform Eskil injection attack again.
But this time we are not able to get access into this website as a security level is set to maximum.
OK, so let's try to attack again.
Let's say Elamine and possibly evictee hit enter.
Now, again, let's make it as fuel injection one is equal to one hash, and this time let's try to
make Passover feel as well.
OK, so let's change it.
OK, and click on Forward.
OK, see?
It says bad username or password.
So this kind of security is sufficient to stop Eskil injection attacks.
Now, what is happening behind the scenes?
The webpage has given instructions using security that never in the user name or password you found
characters like single code or double code, then just remove them because username and password will
only accept plain text.
OK, for example, let's say we have used this indication on both username and password.
Now Web page will ignore this single code, OK, and make it a plain text because whenever we remove
a single code from our injection, then this is no longer a ESKIL injection.
It is just a normal text.
Right?
So this way you can secure if you are a programmer, then you must know how to secure from a text like
a skill injection and cross the descriptives right so that attacks won't work in level five security
in our virtual environment.
OK, now in the next video, I will perform Eskil injection attack on live Web sites.
Right?