Command Injection - Lab #5 Command injection with out-of-band data exfiltration | Long Version
In this video, we cover Lab #5 in the Command Injection module of the Web Security Academy. This lab contains a blind OS command injection vulnerability in the feedback function.
The application executes a shell command containing the user-supplied details. The command is executed asynchronously and has no effect on the application's response. It is not possible to redirect output into a location that you can access. However, you can trigger out-of-band interactions with an external domain.
To solve the lab, we execute the whoami command and exfiltrate the output via a DNS query to Burp Collaborator.
▬ 🌟 Video Sponsor 🌟 ▬▬▬▬▬▬▬▬▬▬
Purchase the Hacking Fundamentals Bundle: https://hackersacademy.com/courses/ha... (affiliate link)
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://bit.ly/30LWAtE
▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:13 - Hackers Academy sponsorship (https://hackersacademy.com/courses/ha...)
02:05 - Navigation to the exercise
02:37 - Understand the exercise and make notes about what is required to solve it
03:29 - Exploit the lab manually
07:09 - Script the exploit in Python
21:05 - Summary
21:24 - Thank You
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Exercise Link: https://portswigger.net/web-security/...
Rana's Twitter account: / rana__khalil