Welcome to dyslexia in dyslexia was the source for the excesses one day abilities on this Life website.
So this is the website that I'm going to correct.
So let me just go to the options first and make sure that your mental processes check it over here.
After that we're good to go.
So first of all I'll just say new scan and uh if you just copy this link and just go here and paste
over here.
So this is the way so in the previous versions of the book.
So there is to be something called the spider.
But now it is just auditing and crawling though it puts it is pretty much easy in the newer versions.
So now in the target you could see once if you are a little bit here already been grown.
So let me just make this a bigger and you could see we have here the content.
So if you see here we have the hoist which was basically your target and the metal method is get out
of post.
So gate is basically getting the all pushed is anything you post to the server.
So next one you end up barometers.
So barometers are useful because we want to source for any of the exercise attack.
If there is no barometer.
So we have two swords for the perimeter we have to this make them assorted in the form of barometers
and we'll thus hunt for the excesses and the next one is a status squared which means if there is a
way are basically two sorts for the exercise.
So two hundred is a valid court and the land.
So land is very important so anything that is bigger of the land.
So from the first 10 link can be used two swords or hunt for the X is it.
So make sure you just saw this land also in the descending order.
And after that you have these what is the type.
And the title comments and the time it has requested.
So what this bar does is Barb is actually a man in the middle frame.
So what that means is it will just send the request and basically it will send the response into this
phase the request of the client and basically get all the content from the server in the form of man
in the middle.
That means all requests and this ones will go through this barb prompt blind to the server and back
from server to the client.
So that means this barb is a man in the middle and it will check for every method way.
It will just index some of his own parameters are basically some of his own information to the barometer
and it all sorts if it can be vulnerable or not.
So you can see we have the post method right over here.
Let's see and let's send this to the repeater so let's go to the repeater and you could see we have
this barometer here.
So these are the parameters so you can see page over here is screening for Java enabled keywords.
So these are your parameters.
So let's see if this keyword is wonderful or not.
So let me just pass here.
7 8 7 8 endless press this go button over here.
And if I just spicier the something like seven eight seven eight then you could see it has been deflected
over here in the value field.
That means this is the wonderful feel are the keyword can have the vulnerabilities.
Let's go for another proxy.
Let me go to the target again and let's see for another post.
Send this to the repeater again.
Let's go to the repeater and it has a first name in the e-mail and everything.
So let's go for first the first name so I'll just say you did me that my first name is press go and
let's see if this Udemy is reflected or not.
So Udemy is not related because it is saying no matches or zero matches.
That means this first name field is not vulnerable.
So let's take for the e-mail too.
So I suggest this place go again.
And now as I say test it is also not vulnerable.
So let's go now for the last name.
I think this last name is also not one label so let's take this one.
So as is something like searching endless bliss go let's see if this one is wonderful or not.
So let's see that scene and it is also not vulnerable because it is not reflecting back.
That means any barometer in this you are all is not vulnerable.
So let's go back and make sure that intercept is off your boy here in the target will just search for
another way.
That is this post again.
Send this to the repeater and we already know that this keyboard is basically deflecting.
So if I just press here something like you did me and if I just press go he will say you will be reflected
in this value.
So let's make the payload so as to run these filled.
So this copy everything that is over here.
So I'll just copy that means copy everything out every field where this value has been deflected so
it has been reflected in this value attribute of the input tag.
So this copy everything from there.
Let me just pasted over here.
So our you read me was reflected in the value bill.
So our payload.
So I'll make a simple payload over here first.
So our payload will be simple script.
And let me just remove this tape and it will simply say alert and it will simply get one.
So this will be our payload simple payload.
But you could see that we have to first close this value field because it is reflected you were here
and we don't want our script to be executed inside this input tag.
So first of all we have to close this valuable.
So one double code will disclose this value field that means this value will be empty now.
And after that we have to close this input angle.
So so as this close this input that now we can execute this payload.
So let me just copy this go over here in the UK me.
Let me just paste it here and if I just press go again and let's see the response in the browser.
So I just click on these stories once in browser.
Let me copy this link.
Go to the browser and as I say best and go then it is swing one.
That means it is wonderful.
So this link was wonderful over here.
So we got successfully Greg the accesses vulnerabilities on this space from this keyword.
So let's go for another target and let's see if we get any get request.
So let me just sort this out in the land first so let me just sort this out real quick.
So if we just double click then it will get the link having the highest land at the top.
So I'll just say send this to Peter again.
And now it's time to series for the.
Another page is here.
So let me say sorts or let me just give it a unique name.
So let me say nineteen ninety three please go and let's see if this 1990s reflected and it is not duplicated.
That means this link or this space file is not one day well.
So now let's go again to the target and you go and see that we have buttons of where you are.
You can test it out.
But now let's make a use of this same post method because we know that it has the.
Basically it was not vulnerable in another post metal rods when it was so it is right here.
So let me say this again through the repeater and you could see this Gewirtz was the way or basically
it was it reflected.
That means I'll send this to the intruder.
I'll go here and in the intruder you could see the positions as first cleared because I want to see
that the payload will be executed inside this keyboard only because this other field are useless and
they don't have any accesses wonderfully it is only the skewer feel are cured barometers has the accesses
vulnerability.
So I'll this select all of this feel.
Let me just add because I want to inject the payload over here so I'll just simply select the add from
these right in panel and I'll just go to the payload and go ahead and load my payload.
So if you just remember we had something like accesses that DST which was the buttons of a payload and
it has a bunch of a payload.
You can also download it from the resource section and if you want to just download it from online you
can simply go to and source for payload least accesses released or something like that.
So below list and it is not giving anything so he accesses so you can get this link and you'll have
everything that is the list of text file here.
So let me just open it.
So it has everything that you need.
So it is a bunch of a payload over here.
So you could see every payload that existed or that Kansas attack any of the perimeter is over here.
So you mix your users download these are copy in the text file and loaded here.
After that we'll simply start the tag because other parameter over here as optional soulless starts
are basically wait for a moment know because it is just going for 109 which is the payload count over
here.
So wait for a moment it will take a certain time
now finally destroying finished so you can see the pillar 0 was empty.
That means it has also injected the empty payload and need to guard the land of this much so any other
payloads would have lent to that is greater than this.
So let me just make a double click on that to just see which has the highest land.
So obviously this bunch of pillared has the highest land to end with the source for any other pillars
or less source for this is Visa and let's see if this works or not.
So I'll this see response to the boat is so instead of that you have to go over here.
You can also simply lower any other pillar like we just did in the online over here so you can search
for any other payload you can inject over here so you could see this payload was working so we pay this
insert some payload like this.
And this was the payload that we just saw on a couple of minute ago.
So this can be also injected and you can also add from here it will be injected in here at the end and
you can simply start the attack again and wait for a moment.
It was to start the attack and do this to get every result of the attack in less makes you that land
is sorted out in the descending order and after that you can simply see the response in the browser
and is this to make sure you see this click that and see the response in the browser.
Copy that link and paste in the browser to see the response.
So this will be read for this selector.
See you in the next one.