OWASP JUICE SHOP CHALLENGE | EASTER EGG | SOLUTION | LEVEL 4 - ★★★★

Поделиться
HTML-код
  • Опубликовано: 27 окт 2024

Комментарии • 8

  • @samanthaleon1886
    @samanthaleon1886 3 года назад +2

    thank you for making this video, where do you get filelist from?

    • @johnsonmanual7652
      @johnsonmanual7652  3 года назад +2

      Thank u so much for the comment..
      just search for the list in google and download it.
      Example- github.com/daviddias/node-dirbuster/blob/master/lists/directory-list-2.3-medium.txt

    • @samanthaleon1886
      @samanthaleon1886 3 года назад +1

      @@johnsonmanual7652 thank you

  • @n.sommerfeld9292
    @n.sommerfeld9292 3 года назад +3

    Why do you use 2500 for the null byte injection?

    • @johnsonmanual7652
      @johnsonmanual7652  3 года назад +1

      A null byte in the URL is represented by '%00' Which in ASCII is a "" (blank space). The null byte %00 must be url encoded to %2500 for use in a web application.

  • @aneeltripathy7420
    @aneeltripathy7420 3 года назад

    Why %2500

    • @johnsonmanual7652
      @johnsonmanual7652  3 года назад +1

      A null byte in the URL is represented by '%00' Which in ASCII is a "" (blank space). The null byte %00 must be url encoded to %2500 for use in a web application.

    • @johnsonmanual7652
      @johnsonmanual7652  3 года назад +1

      While processing, PHP decodes the urlencoded field (%2500) to %00.