Welcome to this selector.
So all you need to do is simply open the source said.
This is Test players reveal an old site which is test websites.
So after that it this uh go to the signing.
So you have you know your profile.
And that means you have been hacked.
So that means anyone has this in that course so that was us.
So we just injected some of the payload over here in the previous letter.
So for now all you need to do is simply go to the homepage and do this.
Okay okay.
We don't want to do a good deal.
We want to this go to this home and after this you see at the down that it is saying yes the TB perimeter
pollution the Skoda and also spastic.
And after that you will see these selling Cobra here.
And if we just remember from the previous letter anything that is starts with this question mark is
a barometer.
That means this people's barometer.
So let's inject our script here and see if this is reflected or not.
So this is script.
And if you see it is not been basically it is not reflective.
So you are not seeing the masses of allowed in these space.
That means you would do under this BP is not affected or basically this is not wonderful.
But if I just remove this and say hello and you could see a halo is also not reflected.
But if you want to see the best source just press control you.
And it just so you appear source control of two sorts.
And if I just say Halo so Halo has been deflected it this bad image.
So you could see in these a yes area of tag which is our anchor tag in this anchor tag you have a yes
idea of attribute which is having these people perimeter with these Halo so you could see Halo has been
reflected in this BP barometer.
But our core which was script cord which was simple script was not reflected.
That means we have to make our own payload so as to run our script.
So let me just open right here and if we see we want to just inject our cord without a script cord let
me say Okay let me just grab on to it the same is here.
But let me just grab this whole anchor tag.
First of all okay and let me just copy this.
Go to the sublime and best you down here so you could see our Halo has been reflected right here.
But Halo is basically if we just passed positive script so instead of Halo as I say script and I'll
just buzz one and close my script then what happens is this script will be injected inside this anchor
tag.
That means this script ought to be executed.
And if we just remember with this ESD email what we learned in the estimable then.
So let me just pass a real quick and if I just say yes to e-mail then you could wonder that this script
should be outside at this stack.
So if I just pass here Bardi and if I just say I want a I and it's free of and anything that.
But if you just inject your gourd that is your script call inside this anger tag let me see if I just
around here that I want to inject something like.
Let me say a BP tag will be screened and close my script and you could inject any code inside here.
That ought to be executed because it is inside this anchor desk.
So first of all you have to close this anchor day and then only execute this script tag because inside
any estimable element you can't inject every script.
So if you see here we have also the anchor tag in our script will be executed or our script is included
inside this anchor tag which is not valid.
That means our script wouldn't be executed because of that.
So if I just remove this and just paste here the same.
Okay let me just go back and let me just say here that we had injected this script.
So let me inject it again and control you.
And now if I see the script you could see some encoding over here and you could see here that this BP
field has injected the escape but it is inside this in Gauteng.
It is not outside this anchor tax.
If you want to execute your script it should be outside of the estimated element that means in this
case it should be outside of encoded.
So let's create our payload so that it will be outside this and go tag.
So first of all you have to this close closer in contact because we don't want the code to be executed
inside the anchor tag that means you have to get that tag to be close.
So first of all we want to disclose that in contact with this.
Basically this is the single code if you see here because we want to close your idea of field first.
And this is the way to close.
And after that we'll just close our anchor tag with this over here.
Now we can this make our risk because we are now outside the estimate element.
So we can just inject our script now.
So I'll just make.
OK.
So this is our script.
So the cell completes the payload.
So if I just execute this real quick so let me just copy this.
First of all and go back and instead of this simple payload we want to inject now this payload if this
heat into then you could see it has been executed.
So our payload is working over here.
So what we did was we just customize our payload from the simple payload in order to execute this and
new script.
So all we did was we just close first our encode tag which was the estimable elements because you sort
just know that this script cannot be executed inside any estimate element.
So if it was something like let me say if it was paragraph so if it was paragraph and if it has something
like ideas let me say them more.
And now if you want to just inject or let me say something like a barometer it has something the barometer.
And let me just give real quick that if it was OK instead of its area of I can make anything over here
and I'll say something like X and so if I just say axons and if the axons was having some barometer
so let me make a simple example here with this question mark and the barometer and if you dig to your
script right here.
So if I just make a script a loved one and close my script again.
So this won't be valid because our basically it would be valid but it ought to be executed because this
script is inside the speed at which is the element.
So in order to this run this script you have to first close your paragraph tag which is just doing this
paragraph tag.
And after you disclose that you can just run every script or you can also simply do something like this
or you can just first close again the speed bag and run your script so you can simply do anything like
this and you will this close your script.
So this can be your new payload in the case paragraph so it is simple to make the Axis explored and
execute in the light Web site.
So we'll see on the Labor website in the upcoming lectures in the next one.