You will learn about a new kind of attack and it's a very popular one and attack is a buffer overflow
attack.
So buffer overflow attack is basically very common in web applications and you need to understand what
is Bouvard overflow and what are the limitations of that that we are going to London this year.
So first of all do one thing just
you can upload your tweet right.
You can see that I have already closed my box.
So you can have a tweet from colonics bait and then you can change your proxy settings of a browser
by clicking here click on preferences and then click on the Advanced Settings and do one thing click
on No proxy and click OK.
Right.
So click no proxy and click OK and that's fine that's fine no buffer overflow insight maturity.
So if you click on the west 2017 and if you select indiction then you will you can see buffer overflow
is available here and you can click on repeat over here so that we click on repeat.
So we are here at the bottom right now.
Let me show you in the hints and videos.
But before the photo click here and taken before the world hated us.
So what is so buffer overflow is may occur when input is too large to fit inside the space or it.
For example if you have a hard drive of 500 G-B And if you're trying to insert data of one terabyte
is it possible it's not possible.
Right.
It will overflow obviously.
So that is the condition inside before the overflow when you are trying to insert some integer or some
string values in the database and data that is not able to hold that it is too large for database data
which will give you an error rate and that will be called buffer overflow quickly so that this Web site
contains a buffer overflow where literally it means it will not physically check that the input is right
or wrong.
For my database that is for the word Hello.
So let me close this.
This is before the order so it looks like you click on hints and we need to minimize it.
And now here we are.
So there are six string to repeat and number two type number of times to repeat.
So you can take any string.
For example I can type 1 2 3 4 5 6 7 8 9 10 1 2 3 4 5 6 7 8 9 10.
This is really large integer number data which is not able to hold this kind of number right.
Databased not be able to hold this very large number.
Right.
So if I can if I that five times I want to repeat this line if I click on the beat string so you can
see here that it has been repeated actually five times and if it is repeated five times it means the
average is not able to locate this kind of space inside their database.
But if this publication is not giving you any error it means this contains buffer overflow when that
ability it is not giving you a warning message that I'm not able to basically stall this kind of integer
because I don't have any storage I don't have enough storage to hold this kind of integer.
So that means that this website is actually a little before the word floor.
It is not checking anything just inserting everything.
What were you is trying to insert.
Let me show you another thing.
For example if you're trying to insert access a setback for example what is this a new type script.
And inside.
Alert
alert when you try to insert something like up.
Hacked by.
So that close and then script looks.
This is a kind of.
And if I tried to insert it two times.
So what will happen when I click on the string so you can see here that it is also will do Access's
injection and buffer overflow
box to games.
So if I communicate it will again create a pop up.
So if I click on OK then you can see here it is again giving me a pop up box.
So this is called Before the floor that the application is not checking the user input and you can insert
any kind of data inside of that.
Right.
So we have known about before.
So thank you so much.