4 Exploiting Script Source Code Disclosure Vulnerability
sul canale di: tutorials for beginner Adobe photoshop, Javascript
In this lesson I will show you how to exploit source code disclosure vulnerability. This vulnerability will make the hacker able to read the source code of any script by using the file name. As you can see here, this website has some categories and each category contains some products that contain some information with some pictures. If you try to check these images you will notice that the developer of this website is showing the images using the show image dot PHP file with the file parameter. Let's test this end with and see how it performs after modified them. Every time I change the filename the website is showing another image. It seems that these images are coming from the Picture directory. So if we try to make the website showing an image that is not existed, it will show an error. In fact, modern browsers will hide the real errors because you are a normal user. If you tried another web browser like Internet Explorer, you will find the real error 3. Just copy the same link here and press enter. As you can see, the detailed errors or heat and it is telling you that the application couldn't find that white which is 1 to GBG. Let us become smart and try to exploit this behavior. Let's try to show a BHP file and see what happens. Wow, this is magic. We can see the source code of the index dot PHP which is the main page of this website. An attacker can get sensitive information like database connection details by analyzing the source code. Now let's try to read more files from the web application. Search for PHP file names to read the source code from them. Here we go categories dot PHP. Let's read its source code. After the equal of the file parameter time dot slash categories dot PHP and had very good we can see the full source code of categories would be TV but we I think that you notice something important. Database connect BHV the name is sinister. Let's see what does it contain? Yes, as you can see, this is the real magic. The database connection details are here. The server name, the username and the password and this is the script source code disclosure vulnerability. I really hope that you enjoyed this lesson. Please if you have any questions just message me. Thank you.
In questa pagina del sito puoi guardare il video online 4 Exploiting Script Source Code Disclosure Vulnerability della durata di ore minuti seconda in buona qualità , che l'utente ha caricato tutorials for beginner Adobe photoshop, Javascript 27 febbraio 2022, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 127 volte e gli è piaciuto 3 spettatori. Buona visione!
