In the previous video, I told you that whatever clothing function used on the Web page, you have to
use the same function, otherwise your script won't work.
OK, so we have seen that on our website.
We have to use double code closing, OK?
Only then we will able to run our script.
OK, because if you don't use this closing function, then our script will won't work.
Right now I know that it's a little bit confusing, but in this video all your confusion will be cleared,
right?
So here is our website, which help you to increase your knowledge and confidence about Exercice attacks.
Right?
So the website called Lead-time Dot Net accessors one.
OK, so I'm not sure, but this website provides you around seven or eight levels of different challenges,
OK, which will definitely help you to practice Access's IPEX, which will help you to understand how
you can help on my website.
Right.
So let's click on a year.
Bring it on baby.
And here is our first challenge.
OK, so it's asking to enter your name.
So I'm entering my name, ok.
It says cannot find you.
Yes, that's what we want.
Now let's run the script and let's say alert one, two, three, and then prosit.
OK, click on Search.
It says one, two, three is reflecting.
OK, nice try but use a learned document don't you.
So we have to use this alert instead of using one, two, three.
OK, only then it will take us to the next level.
Right.
OK, so nobody you can enter the script again here or you can edit it from here as well.
OK, so let me edit this.
So instead of using this, we have to use document to go out and hit enter and it says good work, you
are welcome to the next round, OK.
So now here is the challenge too.
So let me enter my name again.
OK, this time we are not getting a reply.
So let's check out the page source.
OK, no, not selection.
I want to complete bedsores, right, and here it is.
OK, here is the input.
So let me copy this.
OK, so the reason behind it is not reflecting is this one, OK, which is a closing tag, which is
a closing bracket.
OK, so this is a closing function.
So in the previous video, you have seen that we are using the closing, but this time we have to use
this bracket only.
Right.
So our payload would be something like this.
Script.
OK, alert.
And then one, two, three, and then close it, right.
So this would be our payload for the jet engine number two.
Right.
So let's use it.
OK, but first, let's try this with the name, OK, and see whether it works or not.
OK, so it's reflecting back.
Yes.
So the method of using is absolutely correct.
Done.
OK.
Again, we have to use this thing instead of using one, two, three.
So no worries, let me edit this again.
OK, so now it's time for a challenge.
Three, let me enter my name again.
Let's view page source and here it is.
Let me copy this.
OK, so the reason behind it is not reflecting is this, which is the Bellecourt closing, right.
So let's try this again.
Here, OK, so the closing and my name hit Enter and you will able to see the reflected pretty then.
So let's use our script again.
So script.
This one, this is our payload, right, and this time, let's use document dot, you are in and close
the script.
And hit enter.
OK, so now it's time for challenge for OK, so this time let's use hello.
OK, view page source and let's see why it's not working.
So.
OK, this is the reason behind it is not working, which is single called closing, right.
So I hope now you understand that whatever return here, which is a closing function, you have to use
the same thing.
Right.
So let's use it, which is the single call closing.
OK, so let me add this here.
Single closing in.
Hello, C..
It's reflecting OK, which means we have to use the same thing for our script as well.
So script alert, one or not, we have to use a document, don't you.
All right.
And then close the script hit enter.
OK, great work.
Now it's time for Challenge five.
OK, so let's use hello again.
And it's not reflecting.
Let's view page source and see this one.
OK, which is input field and.
OK, it says input by text name is equal to name, there is the hello.
It's not getting it OK, so let me take my name and let's visit the page source and let's find.
OK, so it's not taking this right.
The reason behind is, is.
In type, text and then name.
OK, so here is one more different thing, which I forgot to tell you about, is it see, it is not
necessary that you will get a single input parameter feel right here.
You will find two different parameter fields.
The first one is the name OK, which is my name, and the next one is submit.
OK, this pattern submit is also an input parameter.
So this one is the first input parameter and such is the second one.
OK, so let me type something like this, which is Henno and let's say one and here and submit we will
try to run Halo two and hit enter.
OK, and if we go inside the page source we will be able to see.
OK, so problem is different this time.
So let's try one more time and let's visit view page source.
And here you will able to find that it's taking our input as a string and that's the reason why it is
not working here.
OK.
So whenever it picks our input as a string, it won't execute this one.
OK, so what we have to do is we have to close this thing.
OK, we have to close its script.
Right.
So the actual thing would be like this.
So let me show you our payload would look like this to slash the script.
OK, then.
Now we have to run our script.
OK, so script alert and document dot you all and then close it.
OK then.
So this would be our payload for this new challenge.
OK, so let's move here and let me use this.
OK, done.
Right.
So as I told you that whatever it used for closing your function, OK, whatever function they will
use on a web page, we have to use the same thing.
Right.
So that was the case now in Jenin six.
Let me tape again and this time.
OK, let's close this.
And it's not reflecting, so let's be open source again and let's see this one.
OK, so yes, again, what's the reason that it's not working?
OK, I hope this time you will be able to find out the reason, right?
So, uh, the reason is this, again, the closing function, so this time, if you want to create the
payload.
Use this thing force to close this, close your function, OK, and then try to run our script.
OK, which is document that you ordered and then close it as always.
OK, so copy this payload and pasted here.
I hope it will work.
Oh, yes, good work.
You are welcome to the next round.
And now it's time for Challenge seven.
OK, this time let me use hello again.
OK, it's not reflecting.
So let's view page source.
OK, if you are able to see the coding here, you will know that it's not taking input from your keyboard,
OK?
So whatever you type using your keyboard, it won't work here.
OK, so that would be an increased level for exercise changes, right?
So this time we have to use some other thing.
So this time let's try to assign input using mouse.
OK, so those students who know little about programming will understand this thing.
So we will use on mouse over.
OK, you would assume this as a script or as a function.
OK, so whenever your Web page has a secure coding like it won't accept input from your keyboard.
OK, so in that case, any of your attack won't work.
OK, so in that case we have to use mouse input.
So on mouse over and let's say alert and the alert would be document dot urin and semicolon.
OK, so let's try this payload in our challenge number seven and let's see that it worked or not.
OK, see, whenever you use on mouse over, you have to move your mouse on that input field.
OK, as soon as I moved by mouse to the name feel it work.
Right.
So I hope now you understand that whenever your keyboard is not working, you have to use your mouse
inputs.
Right.
You have to assign inputs using on mouse over.
OK, so now it's time for a challenge.
Eight.
Let's see how different it is from other challenges.
Let's move the page source.
OK, there is a little difference between the two.
This time we have to use double codes, right.
So double goal here and here as well.
And this would be our payload for the jet engine number eight.
Right, let me close all of these.
OK, so I hope it will work, it's not working.
OK, so as I told you, we have two different input parameters, so let's try the same thing on the
second parameter as well.
OK, so let's run our payload on this search parameter, OK?
And let's see whether it works or not.
See, it worked, right.
So this way you have to try.
OK, just finished.
OK, so the challenges are eight.
OK, eight different levels of challenges you will find on this website right now you have to understand
that.
Do the same thing.
Want to work on the same input parameters.
You have to try your each of your attacks on all of the available input fields or input parameters you
find on a website.
For example, on e-commerce websites, you will find a lot of parameters on a lot of input parameters.
OK, so the search of or the login page or the sign a page or the contact us page or the boxes.
Right.
So you have to include all of the input parameters in your attack in order to find a single vulnerability
in that website.
OK, so I hope you understand the difference between almost a normal keyboard input.
Whenever your keyboard inputs are not working, you have to use on mouse over OK, and you have to move
your mouse on that field in order to work your script.
Right now, in the next video, I will show you how you can earn some real money by hacking into some
websites and how you can find those websites.