‫You, IMAP, does a great job with every single injection.
‫So using its options, you can exploit many hard escarole injection vulnerabilities.
‫So in this lesson, we're going to exploit such an injection.
‫Now from the menu, open escarole injection, login form user.
‫And this is a login form.
‫And the developer wants to bypass this form.
‫So it's the same with the login form hero.
‫But the code is different.
‫So when you write a wrong log in, it says invalid credentials.
‫And if you type a single quote, you get a escarole error.
‫And that's good because that means that we can break the syntax.
‫So now we need to find the best syntax to exploit.
‫But it's not that easy.
‫The answers in the code.
‫So it's open terminal and view askew, I underscore sticks that BHP.
‫These are the regular checks.
‫So scroll down to the actual part, and here it is.
‫The developer makes a different thing here, so on the hero form, the developer checks the log in and
‫the password in the same query.
‫But on this form, it's not the same.
‫The developer hashes a password provided then checks log in only.
‫Now, if there is a suitable organ.
‫Then they compare the hashas.
‫And if the hashes match, the user is authenticated and the message is printed.
‫Otherwise, an error message is sent to the page.
‫So.
‫We can even accomplish an injection over log in, but we cannot see the output on the page, you know,
‫why write?
‫Because the extra check happens outside the query of the password hashes.
‫OK, so go back to Firefox.
‫Refresh the page for a clean view, then enable Foxe proxy.
‫Now tell you something along infield and go to burb.
‫So the request is here.
‫OK, covid the request to a file.
‫And save it.
‫You can then let it go.
‫We are done with burb, so open terminal again.
‫And then type escarole map dash are to point to the saved request file.
‫Dash plug in to test the login parameter and request.
‫Of course, you can add the age parameter for a special HTP headers.
‫Escarole map will read the file and fudged the login parameter in the request.
‫Now, it will send exactly the same request in the file by adding the special letters.
‫OK, then hit enter.
‫It detects an injection for Maisky.
‫Well.
‫And now, because we don't provide the DBMS parameter, it asks this question, you know the answer.
‫There's no need to test for other DBMS his.
‫A new question, of course, tests for other types.
‫So it finds different types of escarole injections.
‫So accept this, accept this as well, no, don't test for others, OK, it's finalized as Google Map
‫detects three types of escarole injection.
‫So we can go one of them.
‫So just use the same query and add technique as a parameter.
‫Type E, forever based escarole injection.
‫And there's the result.
‫So now we can use some other parameters.
‫Fingerprint and banner information.
‫Boy, it executes quickly.
‫So the point here is escarole map uses air based techniques to get this data.
‫But if we do it manually, I believe you me, it will be mind blowing, mind numbing, perhaps, anyway,
‫the rest of the options you're going to want to use will be done with this technique.
‫So get the current database and the user.
‫And the result is here.
‫So I hope you can see as well that Escorial map provides us a super usage experience.