All right, welcome back, everyone.
This is Rajneesh, and decision is about cross site scripting.
Dach Right to concept scripting is all about, as the name suggests, when you insert a script into
another domain.
All right.
That's called cross site scripting.
And that's part of an attack.
And let's understand what exactly it is.
And then we would understand how we can accomplish this attack.
Right.
And understand this with this is one of the most popular hack other than, in fact, skill injection
and many of the vulnerabilities as it has been there in the last top in vulnerability for many years,
in fact.
So let's get started.
The first part is, OK, what exactly it is?
It's a vulnerability that allowed in and that allows an attacker to inject the code into the content
of the outside website.
So this is what if you recall correctly, this is what we have learned in the S.O.P in the video, Supai
as well.
This is what the S.O.P basically blocked, but great for a second.
And so we blocked injecting the code to another site by loading the JavaScript from the website from
the another Web site is not blocked by is not denied by the ISP.
OK, you can act with the S.O.P, you can stop the injection to the NADR website, but you can still
load the website, you can still load the DOA script from the website.
And that's what the that's what not being denied by the European.
Hence crosseyed scripting is possible.
So let's understand.
There are three main crossette scripting.
The first is reflected accessors which is the reflected crosseyed scripting and then we have stored
crosseyed scripting reflected groo scripting is pretty much popular but and when you have to spend a
lot of time an individual user to compromise, where exactly we use it, when, when we want to compromise
multiple users, we want to compromise the user, or maybe we want to get the complete access to the
user.
Or maybe we want to compromise using dad's laptop system, mobile phone or anything.
We make use of carotids going, what is our attack vector?
What is our tool for this?
We just need a website.
We just need people to come to the any any sort of website or maybe compromise website and then they
can launch their attack.
Right.
This is all the start to do with it.
The Reflektor, that is the first matter, which is which is pretty good, but it requires a lot of
attention where you have to compromise a lot of users in order to get the return on your value.
Inward investment, in fact.
Second, as the store exercice and of course, this is what this is what you will learn that the store
exercise is something where although it takes time, but it really has a value on your investment as
a time or money or whatever it is as a hacker.
Right.
And then there is a -- exercice which is a bit more collective and, you know, advances well in
some of the sense.
So this is all three exercice that will be talking about and will be going through each individual crossette
scripting one by one and will be understanding in much more detail the variety of love with it.
All right.
So let's get started.
Thank you.