Now, let's use as fuel injection to hack our target website, so first of all, let's open our Web
browser, so 10 or 2.5 and let's open a website, BBWAA, and let's type the user name and password,
like eliminate admin, OK?
It's not working, so let's try admin and password.
OK, so we are able to log in to this website right now.
You might be thinking that why I'm using these kind of easy passwords, because there are still some
website owners that are using these kind of simple passwords on their websites.
Right.
So don't ignore the little things.
Now, let's load from here and let's switch to another website.
Let's set this one, which is Medidata.
Now click here, login or register.
OK, so let's try the same thing here as well.
OK, not working admin password again, not working.
OK, so first of all, let's find out the real username and password for this website.
So let's switch to our terminal.
OK, now let's try to log in
again, show databases.
Use of ESP then, so Westend is used by Mojadidi.
OK, hit, enter and let's show Gable's.
And select staff from accounts.
OK, so username and password is admin buzz, OK, and this is the signature is Elamine Drew.
So this is the admin and this is another admin user.
Right now, let's close this and let's try to log in using admin and admin pass.
OK.
It says, we are not able to log in via OK, here is an error.
Now, if you are using this for the very first time, then you will also get the same error.
OK, there are chances that you will get the same error in that case, switch to your MLO label and
change your directory to where w w w and motility.
OK, and now let's edit a configuration file.
So we use Neno, Neno is a text editor and then config file.
OK, but before it aired sudo hit enter.
OK, now let's change this thing, OK, which is databased name to change, databased name to all of
us then.
Now, to save the final use control X and Y hit enter.
Then now let's switch back to Cali and let's try admin and admin bus.
OK, so now we are logged in as admin then.
Click on Logged, now let's try the same thing using Eskil injection, so Edman and simply a single
good hit Enter.
Now, read this line, which says, Select a star from accounts where user name is admin and password.
Is this OK?
So let's select this line and let me open a file editor or edit, OK, it is a graphical editor.
Now, what's happening behind the scenes?
The system will be selected from accounts.
OK, account is a table in which we have access to only.
Right.
So user name is admin, OK?
That's correct.
Now, password is this, which is wrong.
That's why it's giving us an error.
OK, so delayed this for now.
And let's try to bypass this authentication using a injection.
So let's say I want to try password as one, two, three, four, five, six, which you know, it is
a wrong password right now.
And a single chord here, OK?
And then space order one is equal to one.
Now, what happening is we have provided two different conditions.
OK, two different statements that whether this is a password, but if not, then one is equal to one.
So, yes, this condition is true.
One is actually equal to one.
So we are informing system that, hey, we are providing you two different conditions, this and this.
If any of them is true, then you must allow us to log into our account now space and hash hash Stobbs
system from reading further information.
OK, so system is not able to go beyond hash, right?
So now the actual scenario is like this based here, so it will look like this fourth system.
So system will check whether a user name element is existing in its stable account or not.
So yes, it is a user name which exists.
Right.
Then it will check whether it has a password.
123456.
No, it is wrong.
But still, we have provided one more condition that all one is equal to one.
So yes, it is true.
OK, then system will not read this single code because of hash.
Right?
So let's try this and let's see whether we are able to bypass authentication or not.
Coming back to login page, so user name is admin and password list Baystate and click on login.
So, yes, we have successfully logged in as admin, right?
So this way is a good indication actually works right now.
You may see here that our security level is zero right now.
OK, so security level is zero, which is a low security.
Now, let's increase our website security by clicking on this step, which is double security, OK,
now at security level has been improved.
So let's log and let's try to log in again using the same password.
OK, now it says username too long.
We don't want to many characters, so might have enough.
OK, see now the system stopped us.
OK, so this is the level of security.
OK, now in the next video, I will show you how you can bypass improved security as well.