Hellow guys, Welcome to my website, and you are watching Hacking Websites by Uploading files (With symlinks). and this vIdeo is uploaded by Tech Raj at 2023-10-14T21:45:01-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | Hacking Websites by Uploading files (With symlinks) |
| Video Uploader | Video From Tech Raj |
| Upload Date | This Video Uploaded At 15-10-2023 04:45:01 |
| Video Discription | In this video, I show you how symlinks can be used to read arbitrary files on a web server. DISCLAIMER: This video is intended only for educational purposes. The experiments in this video are performed in a controlled lab setup and not on a live target. The content is purely from a penetration testing perspective. I do not condone or encourage any illegal activities. The web application in the video supports a file upload functionality where users can upload zip files. When we create a zip file that has a symlink in it which is pointing to an arbitrary file on the server, we are able to read the file pointed by the symlink. In this way we can read any file on the server which can be read by the web server user account (www-data). This can be used to read sensitive files like private keys, bash history, and even apache configuration files. We can leverage this vulnerability to read environment variables that the website is using and find interesting information like Database credentials, tokens, secret strings which we can further use to gain access to various services like ftp, ssh, database, etc. These kinds of vulnerabilities with symlinks have been exploited many times in the wild. One of the finest example is this GitLab vulnerability where the researcher received a $29,000 bug bounty: https://hackerone.com/reports/1439593 Thanks for watching! SUBSCRIBE for more videos! Join my Discord: https://discord.gg/6TjBzgt Follow me on Instagram: https://instagram.com/teja.techraj Website: https://techraj156.com Blog: https://blog.techraj156.com |
| Category | Science & Technology |
| Tags | Science & Technology Download MP4 | Science & Technology Download MP3 | Science & Technology Download MP4 360p | Science & Technology Download MP4 480p | Science & Technology Download MP4 720p | Science & Technology Download MP4 1080p |
