So this year, we're going to learn the theory about this Crozet scripting and this crossover script
called Exercice Extensor, Crosslands cited scripting this type of winnability episode for any number
of applications and what this one attachments this excessive attacks and allows attackers to Ukraine.
Subscription to the police will be added to this.
So this accidents so we can inject our client script, which is a JavaScript we can send through this
HDMI request and that will be passed by the server.
And if there is any misconfiguration, this is where it occurs.
And the script are the payload, which is written in the JavaScript that will be accepted by the server
and that is reflected in our browser.
So this is somewhat background about this axis and Microsoft, including using the term crosshairs grouping
in January 2000.
And you can read the background information about this across scripting in Wikipedia.
And there are some types of this exercise that I just say and explain briefly without, uh, explaining
all these paragraphs.
So first one is non persistent.
So what this means is if you want to send the script along with the request.
And then it will be executed by the Observer.
So after execution, you will get the same execution on the, uh, brother.
So that is correct.
So whatever the execution, the observers say that will be reflected in our process.
That is factor and next to is persistent are still so in this exercise or you will send the Jamelske
as usual, but it will be stored in a database or any other file format.
So.
That shorter period will get executed whenever you are watching this.
So if suppose, let's say example, this is Iraq and this is where you are, I'm sending the period
by putting the hash out something in the water and that will be stored in a database.
So whenever I wrote this, uh, Web page automatically, the period, according respect to this website,
will get through the.
So don't worry, this sounds confusing.
We'll do the demo in the studio, so simply understand this still exists.
Our JavaScript script will be stored in a database.
And whenever I, uh, just visit this website, that will be triggered.
So it will it is very dangerous because it will affect our other users also.
And you can also steal the keys.
And we can also use this dataset.
And you can also do this, uh, website.
Uh.
Website before so this, uh, some of these attacks you can do with Exercice, so Nashton is done based
on this.
In this we will modify the HDMI, uh, content and we press the, uh, using this.
We have already seen this one.
And so we can use this a.l elements.
We can access these elements with the DOM.
And you can just instead of putting some values, we can put the Dallas Crippler.
So this is a sulphurous and mutator axis.
So disservices is not an actual axis because, uh, this is not stored on a server, not, uh, reflected
on a server.
But we will bring the user into executing this exercise so users may find easy redoes.
But, uh, you are you can just use a shock to, uh, uh, hide the pillar.
So these are the basic types of this, uh, axis.
This one is the reflector and the self.
So this is, uh, so in each time we need to send the crippler and then it will execute and the observer
and we get the reflection and then the stored fuel cell, once the better it will be stored in the database
until it resets.
And then whoever it is that will set and that corresponding will get executer.