Welcome to this lecture in this lecture you'll see the exploitation of their sisters attack which is
you at Al redirection.
So first of all what d you had Al read Erickson.
So you had read Erickson is basically when the user want to visit some Web site but instead of the so
going or redirecting to the ordinal lawyers said they will be redirected to another harmful or malicious
Web site where that Web site can be the hacker's Web site or the clone of the Web site where the user
or the hacker would just get the credentials from the user from the social engineering toolkit or basically
they can also get the credentials of the user from the fishing.
So let's see how this works.
So first of all let's see what the axis is attacked because the primary thing for the other three legs
and ease the axis is.
So let's see this is our day strip search so I already made the target of this distorted and if I just
go to this Web site or basically to this link and let me just send this to the repeater it's which so
let's send to the repeater and uh I'll see for this BP barometer over here.
So let's see how low this press go and let's see if this helo has been depleted Nautilus or simply you
can see Halo has been a filigree right here.
That means that it has the vulnerabilities or this is the parameter that has the vulnerability for the
axis.
So basically what you need to do is simply with this.
This has the vulnerability that means we have to make some below.
So let's see the simple payload so let's take if we can this insect our malicious scored swings in this
case it is a simple payload but it makes sense so let's press go.
Let's see here this one's okay.
First of all we need to see the response to the browser so I copy this paste and go.
So you could see it has executed our core.
That means now we Kansas to make you a redirect and to this link.
So all you need to do is simply go over here.
So instead of this what we have the payload so I'll just make Sublime Text and now instead of this payload
that we just create over here which is let me just copy this and if I go to the sublime then you could
see we have the link over it.
So instead of this payload we have to do something else.
So first of all it would be script because we want to just indicate the derbies could code right here.
So instead of this alert masses we want to get the document which is basically the way is which is responsible
for swinging the space which is the document and we want to get the location so this is physically for
the world to document that location is the euro and we want to redirect with this history of tag to
some other Web sites.
So now I want to make them redirected to let me see Twitter dot com so we can just do this simply makes
a report this code over here.
Let's copy this first.
And let's see if this works or not so as the score over here.
So instead of this is clipped as this pass our new script let me just press go.
Let's see response in the browser.
Let's best here they did give a diamond to their has lorded over him.
So that means it has a you a rededication so I'll just make some private window.
And now if I just go over here and if I see this once in the browser that means when I just copy the
link and when is pasted down here then it is something like a bar.
But it is actually the link of this to be as soon as a seed into it was the website of guest B as beta
view.
But it has a g direction to the tweeted outcome.
So what has happened here was we just made a u at a rededication and so user will think that they're
going for the legit to which are basically the Web sites which is a genuine Web site but instead they
would really dedicate to the Web site of the hacker so instead of Twitter it can be the hacker said
so you can just redirect to your own Web site which will have the malicious payload so it can be your
website name and that can have the payload and that you can make user chooses this to download that
payload from your website and you can just give the reversal from the users are a client and you can
do anything with the victim's computer with these simple you are ill read Erickson.
So this is the way to do this inject some of the other lyrics and with this some bold chord you can
make the user to go to another website that they won't even imagine.
So this is the way to perform the utterly Derek's and so assuming the next one.