In the last lecture, we had an introduction to what is Exercice in this lecture, we will see different
types of crosseyed scripting.
So before studying the types, of course, excerpting, first we will see the actors in an exercise
attack in general.
And EXIS attack involves three actors, the website, the victim and the attacker.
Dipset.
The website serves Actimel pages users who request them.
The Websites database is a database that stores some of the user input included in the website's pages.
The victim is a normal user of the website who requests pages from it using his browser.
The attacker is a malicious user of the website who intends to launch an attack on the victim by exploiting
an excess vulnerability in the website.
The attacker server is a web server controlled by the attacker for the sole purpose of stealing the
victim's sensitive information.
Let's start with types of exercice.
Well, the goal of an exercise attack is always to execute malicious JavaScript in the victim's browser.
There are few fundamentally different ways of achieving that goal.
Exercice attacks are often divided into three types, but a system exists where the malicious ring originates
from.
The websites database Reflektor Exercice with the malicious string originates from the victim's request
and the DOM based access where the vulnerability is in the client circle rather than the server side
code.
So let's begin with Reflektor crosseyed script in Reflektor X's attack.
The malicious string is a part of victim's request to the website.
The website then includes this malicious, strengthened response sent back to the user in the diagram
on your screen, the attacker craftsy.
You are containing a malicious string and sends it to the victim.
The second the victim is tricked by the attacker in requesting the URL from the website.
The third, the website includes a malicious string from the URL in the response, and the fourth,
the victim's browser executes the manuscript.
Insert the response, sending the victim's cookies to the attacker server.
So how can reflect X succeed?
At first, Reflektor Exercice might seem harmless because it requires the victim himself to actually
send the request containing a malicious string.
Since nobody would willingly attack himself, there seems to be no way of actually performing the attack.
As it turns out, there are at least two common ways of causing a victim to launch Reflektor X's attack
against himself.
If the user targets a specific individual, the attacker can send a malicious order to the victim using
email or instant messaging and trick him into visiting it.
If the user targets a large group of people, the attacker can publish a link to the malicious you all
on his own website or on a social network and wait for visitors to click it.
The next is a dorm based charoset scripting.
Dorm based exercise is a variant of both persistent and reflected exists in radio and based X's attack.
The malicious string is not actually passed by the victim's browser until the website's legitimate JavaScript
is executed.
On your screen, you can see that at number one, the attacker craftsy, you are containing a malicious
string and sends it to the victim at number two, the victim.
But the attacker in requesting the order from the website at number three, the website receives the
request, but does not include the malicious drink and response ad number for the victim's brother,
executes the legitimate script inside the response, causing the manuscript to be inserted into the
page.
And at the number five, the victim's brother considers the manuscript inserted into the page by sending
the victim's cookies to the attacker server.
What makes the based X's different in dorm based X's attack?
There is no malicious script inserted as a part of the pitch.
The only script that is automatically executed during the page load is a legitimate part of the pitch.
The problem is that this legitimate script directly makes use of the user input in order to add it to
the page.
Because the malicious string is inserted into the page using enriched Timal, it is parsed at esteemable
causing the manager script to executer.
The difference is subtle but important.
In traditional xes, the malicious JavaScript is executed when the page is loaded.
As a part of a statement sent by the server in Dom Best Expresses the malicious JavaScript is executed
at some point after the page is loaded as a result of page legitimate javascript deleting user input.
Unsafety the next iStore cross site scripting while browsing and e-commerce website.
A perpetrator also honourably that allows estimate tags to be embedded in a site comment section.
The embedded tags become a permanent feature of the page, causing the browser to parse them with the
rest of the source code.
Everytime the page is open on your screen, you can see that the attacker since Xs below the server
and every time user asks for the request to the server, the Xs gets initiated by the user and hence
the user is hacked.
From the next lecture.
We will start with the practicals of Exercice.