Command Injection - Lab #2 Blind OS command injection with time delays | Long Version
In this video, we cover Lab #2 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function. The application executes a shell command containing the user-supplied details. The output from the command is not returned in the response. To solve the lab, we exploit the blind OS command injection vulnerability to cause a 10 second delay.
▬ 🌟 Video Sponsor 🌟 ▬▬▬▬▬▬▬▬▬▬
Purchase the Hacking Fundamentals Bundle: https://hackersacademy.com/courses/ha... (affiliate link)
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://bit.ly/30LWAtE
▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:13 - Hackers Academy sponsorship (https://hackersacademy.com/courses/ha...)
02:05 - Navigation to the exercise
02:37 - Understand the exercise and make notes about what is required to solve it
03:29 - Exploit the lab manually
07:09 - Script the exploit in Python
21:05 - Summary
21:24 - Thank You
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Python script: https://github.com/rkhal101/Web-Secur...
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Exercise Link: https://portswigger.net/web-security/...
Rana's Twitter account: / rana__khalil