2 Videos for Code Execution 06

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Code Execution 06
In this video, we delve into Code Execution 06 as part of the essential badge. We explore URL injection techniques and identify the backend language, ultimately executing system commands through Python's os.popen.

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Code Execution 06: Code Review
In this video, we conduct a review of the source code for Code Execution 06, part of the Essential badge. We examine how the Flask application is set up and identify a critical security flaw related to the use of the eval function with user-provided data.