2 Videos for Code Execution 06

PRO
Tier
Easy
< 1 Hr.
11915
image of exercise Code Execution 06
Access to videos for this exercise is only available with PentesterLab PRO GOPRO
Code Execution 06

In this video, we delve into Code Execution 06 as part of the essential badge. We explore URL injection techniques and identify the backend language, ultimately executing system commands through Python's os.popen.

video duration icon03:13 number of views icon8632

 

image of exercise Code Execution 06: Code Review
Access to videos for this exercise is only available with PentesterLab PRO GOPRO
Code Execution 06: Code Review

In this video, we conduct a review of the source code for Code Execution 06, part of the Essential badge. We examine how the Flask application is set up and identify a critical security flaw related to the use of the eval function with user-provided data.

video duration icon02:48 number of views icon1607