Hacking Websites by Uploading files (With symlinks)

[@SteveBClark]

The GOAT is back....❤

[@ReligionAndMaterialismDebunked]

:3 I wonder if this can be used on my bug bounty targets. Also, I'm wondering how many Iranian, Lebanon, Saudi Arabian, North Korea, China, and other sites of terrorist, and dictatorship nations I get can into. 😅🥰🤑😋🤤 Great Indian hacker video. English. :3 😅 Shalom. Namaste.

[@schooldropout1337]

Is finding a way to upload files without following the usual restrictions considered a security problem? Yes, bypassing file upload restrictions is a security vulnerability because it can potentially allow malicious files to be uploaded to a system, which can lead to various security risks and issues.

[@ANKUR--xoxo]

How to do that

[@schooldropout1337]

@@ANKUR--xoxo bro raj will provide an exclusive demo for that scenario 🤠

[@ReligionAndMaterialismDebunked]

Thanks for the donation, and question, brother! 🤝🤑☺️

[@ReligionAndMaterialismDebunked]

:3 I wonder if this can be used on my bug bounty targets. Also, I'm wondering how many Iranian, Lebanon, Saudi Arabian, North Korea, China, and other sites of terrorist, and dictatorship nations I get can into. 😅🥰🤑😋🤤 Great Indian hacker video. English. :3 😅 Shalom. Namaste.

[@raoulduke8064]

yeees new video! GOAT is back

[@divyam847]

glad that you're back :)

[@anudeepkalyadapu1657]

What a video ! Looking forward for such videos man! Keep it up

[@TejaRavipudi]

big fan. happy that you are back.

[@mindlesstelevision3213]

Good to see you Back ❤️♥️

[@_SebJ1000]

It's intresting to learn that they place the password in an environment variable, wonder if most devs encrypt it as well. As that might be the slightest bit more secure.

[@dishusharma7881]

Where did you learn to pronounce environment as enveeronment? I am curious.

[@HackingBinaries-dt2fh]

Love you man, just subscribed

[@TechnicalHeavenSM]

😍😍😍.. You are back❤❤

[@Nin_Cada]

So what is the counter of it? How to not let the hackers get access to the filesystem using symlincks?

[@ClashWithHuzefa]

Check whether if it is a symlink file or not, and don't let the Web server read, access directories, or file outside the Web root. If you are using php, there is a function is_link() to check whether its a symbolic link file or not

[@Nin_Cada]

@@ClashWithHuzefa i see.. So, couple of rules for the webserver should do the trick. Thanks ✨

[@ClashWithHuzefa]

@AkeaNine welcome buddy

[@SankalpaBaral1337]

Brother do you remember you used to create challenges (like CTF)? Please make those types of videos again.

[@pinged69]

Does this affect sites that do not do anything with the file, just purely serve it? I have a pretty basic file hosting service thats public, do I need to somehow worry about this? Symlinks are not something that can be POSTed over HTTPS, right?

[@prudhvikonakalla9605]

Raj-"kingu kingu"

[@TheAKAnonymous]

a suggestion, maybe you should try different titles something special surprising to be able to get more views adding curiosity to new students i mean we are technical student we understand your titles but new students might not and last thing as always this was a awesome video your's TheAKAnonymous

[@anuzravat]

is there some related article for this symlink vuln, u would like to recommend

[@jesusdacoast872]

Very informative, thanks.

[@manishneupane6070]

Wow, great video. Thank you for making

[@NateSec-d2d]

Good content Man.

[@montala3380]

Hi brother, the symlink is only work when target site use ZIP/ TAR. How about normal upload file? can I upload that symlink file to retrieve the content?

[@ANKUR--xoxo]

THAT WAS CRAZYYYYYY BRUHHHHH 🔥🔥🔥🔥🔥❤❤❤❤

[@sagarhp2350]

He's back.. 🤩

[@monsterzero6928]

Can you please make a video on burpsuite how to inject files on servers by changing the file extension and injecting a backdoor with that

[@SwineTech]

Daemon, a program that runs in the background, anyone noticed the daemon

[@Si6n9ne]

where to get this source file of the one you doing right now,

[@Tankbuild-t2i]

you can also direct it make a zip file that contains backdoor shell (shell.php)

[@st.john_one]

pretty informative and cool, thanks

[@Si6n9ne]

Is there any way to recreate this vulnerability, I wanna try and test it out If yes someone point me to it please

[@rajeevpuri8319]

thank you Sir , for this easy to understandable video for a noob like me.🙏🙏

[@scorpionisready]

Informative ❤️

[@lnstagrarm]

More unique python projects please

[@gowthamreddysomala]

Anna nee Videos Kosam Wait Chastunnam ..

[@mahesharyatech]

Any Issues With Users ?

[@usningame5177]

Do you provide. Course

[@evilspidy6924]

Is this exploit have any number like cve-#####

[@Topfive_realestate]

Love you bro 💪💪

[@rishi8413]

love the explaination

[@jimmlmao]

thats actually genius

[@khushipardeshi3114]

Hua kisi se actually hack??

[@TheAKAnonymous]

so late to watch your video

[@byte01-h1z]

Nice !

[@Faysalauchan]

😮😮 so amazing

[@ReligionAndMaterialismDebunked]

:3 I wonder if this can be used on my bug bounty targets. Also, I'm wondering how many Iranian, Lebanon, Saudi Arabian, North Korea, China, and other sites of terrorist, and dictatorship nations I get can into. 😅🥰🤑😋🤤 Great Indian hacker video. English. :3 😅 Shalom. Namaste.

[@ClashWithHuzefa]

Amazing

[@JohnDoe-xp9rd]

Cool

[@pavansasank]

❤

[@vicmacarra]

Lel, interesting

[@IDK_911]

just upload webshell

[@PlayerOne69]

❤

[@localh0ste]

❤

[@shahzansid]

❤

[@sbh3612]

❤