Hello dosto swagat hai aapka hamare blog hindi idea me aaj hum aapko XSS ke bare me batayenge
lekin agar web devoloper dwara agar website ache se nhi banaya jaye to aam tor par ye vulnerbility mil jati hai jiska use karke hacker website hack karke cookies admin usernames,passwords,cc_details etc data chura sakta hai.
Dosto iss Vulnerbility me hacker ya attacker website ke search box ya comment box me aise script ya commanddalta hai jo execute ho jata hai.
Acha hum maan lete hai ki google.com me xss vulnerbility hai to hacker kya karega hacker google.com ke search box ya comment box kahi par bhi jayega aur waha koi mellicious script dalega ye script ya command bhi ho sakti hai toye script server se execute hokar aapke samne result show kardegi
yeh ek website hai jisme xss vulnerbility hai to hacker comment box me jakar script inject karega to script server par jakar execute ho jayegi or hame result show kardegi.
Mana ki ham iss website ke comment box me jakar <body bgcolor="blue"> ye wala command dalte hai to wo command execute ho jayegi or website ka background color change ho jayega
Dosto iss xss me hacker jab mallicious code inject karta hai tab script website ke database me store ho jati hai iss type ke xss ko server side xss attack kaha jata hai
2. Client side Xss(#client side xss)
isme agar client dwara website banane me jo kami hoti hai use clent side xss attack kaha jata hai isme reflected xss aata hai
XSS kya kyu kaise ?
Dosto kisi bhi xss vulnerable website me mellicious code ko inject karke website ke data churana ya webaite ko hack karna xss(cross site scripting) ko kahlata hai. xss ek web based vulnerbility hai. aap to jante hi honge ki puri website alag alag language se milkar bani hoti. hai Ex php,html,javascript,css....etclekin agar web devoloper dwara agar website ache se nhi banaya jaye to aam tor par ye vulnerbility mil jati hai jiska use karke hacker website hack karke cookies admin usernames,passwords,cc_details etc data chura sakta hai.
XSS (cross site scripting) Working methood
Dosto aapko pata lag hi gaya hoga ki xss based web vulnerbility hai or hacker iska fayda kaise utha sakta hai aap to jante hi hai ki website me search box,comment box paye jate hai.Dosto iss Vulnerbility me hacker ya attacker website ke search box ya comment box me aise script ya commanddalta hai jo execute ho jata hai.
Acha hum maan lete hai ki google.com me xss vulnerbility hai to hacker kya karega hacker google.com ke search box ya comment box kahi par bhi jayega aur waha koi mellicious script dalega ye script ya command bhi ho sakti hai toye script server se execute hokar aapke samne result show kardegi
XSS (cross site scripting examples)
Example(http://testphp.vulnweb.com/guestbook.php)yeh ek website hai jisme xss vulnerbility hai to hacker comment box me jakar script inject karega to script server par jakar execute ho jayegi or hame result show kardegi.
Mana ki ham iss website ke comment box me jakar <body bgcolor="blue"> ye wala command dalte hai to wo command execute ho jayegi or website ka background color change ho jayega
XSS ke Types
1. Server xss(#server side cross site scripting)Dosto iss xss me hacker jab mallicious code inject karta hai tab script website ke database me store ho jati hai iss type ke xss ko server side xss attack kaha jata hai
2. Client side Xss(#client side xss)
isme agar client dwara website banane me jo kami hoti hai use clent side xss attack kaha jata hai isme reflected xss aata hai
Hello, my name is Manoj (Mnu). I'm a 23 year old self-employed Boy from New Delhi India.
No comments:
Post a Comment