OSWE GUIDE | "Build it and break it (PHP Blog)" Part 2 | Dumping the PHP Web app via XSS/Python!
In part 2 of OSWE GUIDE - "Build it and break it (PHP Blog)" series, I demonstrate how XSS works, and abusing it dump the backend admin functionality using Session riding attack and automating it with Javascript and Python.
Part 0 - • OSWE Review + OSWE "Build and break i...
Part 1 - • OSWE GUIDE | "Build it and break it (...
Part 2 - • OSWE GUIDE | "Build it and break it (...
Part 3 - • OSWE GUIDE | "Build it and break it (...
⏱️Timestamps:
➡️ 00:00 - Intro
➡️ 00:20 - Summary of web app functionality
➡️ 01:30 - Explanation/Demo of XSS ( Cross Site Scripting)
➡️ 06:20 - XSS Rick rolled ;)
➡️ 09:00 - Setting up remote loading of javascript using script src=xxx
➡️ 11:30 - Remote XSS executed
➡️ 12:00 - Explanation of dumping admin pages via XSS using javascript fetch()
➡️ 13:00 - Utilising python to catch the admin backend page data via Session ride.
➡️ 18:00 - Leveraging Javascript's fetch to grab admin.php and dump response into python script
➡️ 22:00 - Reading response content of admin.php, finding upload.php
➡️ 22:30 - Accessing upload.php over XSS, finding XML file upload functionality
➡️ 24:40 - Summary of attack so far
➡️ 25:00 - Outtro of part 2, leading to part 3 - • OSWE GUIDE | "Build it and break it (...
⭐️Link to web app code:
🔗 https://github.com/SecAuraYT/OSWE
For more Cyber security/hacking based content, check out the rest of my channel - covering SQL injection, server side template injection, remote code execution/injection(rce), linux/windows privilege escalation, wireshark, CVE's, hackthebox, scripting - web application security testing automation etc. :)