OK, now I will perform a sequel injection Attack Online Websites, so I have opened our browser for
this to maintain privacy and let's use Google keywords like in your RL column.
Now, I hope you know the meaning of this in neutral means whatever words I'm typing here in front of
these keywords.
Show me the results there.
These words containing the URL of a website.
For example, if I type admin login BHB OK and hit enter.
Then you will get results only where the you are of our website will contest these three words.
OK, so admin login and BHP, so only show me the login page in BHP, OK.
So this way you will filter out the results.
Now if I add one more keyword like site Callon and then I end OK, I end for India so you can see that
it's showing me the yuan with dot in admin login and BHP.
OK, so all of these words are contained in the search engine results.
Right.
OK, so let's open one more tab and let's try this on, let's say, piqué for Pakistan.
Right, so now we have all of these reserves from dot pecky websites only, OK, for example, if I
open any of these websites, I will get direct access to its login page.
Right now, it doesn't matter whether the website is secure or not is a good indication.
Still works on both of these.
OK, because some of the Web site's owner are not aware of this vulnerability or they don't care about
website security.
Right.
So now I will post the video because I have to open some random websites and to maintain the privacy
of a website and its owner, I even edit this video and hide some of the important information.
I found two different websites which are vulnerable to Estherville injection, OK?
And the important information is hidden just to maintain the privacy.
Now, this is the actual injection which is working on these two websites.
OK, see, it is not mandatory that a single ESKIL injection will work on all of the websites which
are vulnerable to school.
OK, so we have a list of Escott injections here.
I will attach this list with the resources of this lecture.
OK, you can download it from there.
OK, so you have to a single every single SQL injection on both username as well as password fee.
OK, so here is the username and password.
Right.
Simply click on click here.
And this is the.
Admin panel right now, we can do whatever we want because we are now admin here.
OK, you can see here, which is admin dashboard DOT, BHP, right.
So for now, let me close this website.
Remember, never try to log out from a website, OK?
Because that will create logs.
Right.
So disgusting.
The session.
And now here is another website.
So let's try the same injection on this as well.
And if I try to log in.
OK, so it has given me the access and here is the data of this website.
Now I have hidden some of the important information just to maintain the privacy of the website as well
as its customers.
Right.
OK, so this way you can hack a life website using a ESKIL injection now being a responsible person.
Don't try to hack a website without the permission of the owner.
OK.