Astrology helps in predicting events related to various aspects of one's life. The various aspects of a human life are health, family, education, work, marriage, children, fulfilment of desires and spiritual growth. Among all these aspects, health is the most important aspect of one's life. Without having a good physical and mental health, it is very difficult to achieve success in the other aspects of life. Astrology can help in determining these health issues, what can be done to avoid the health problems and when the recovery will happen based on the planetary placements in one's horoscope. Nadi Astrology has a clear methodology to determine the nature of the health problems that are very likely to occur in one's life. Houses & Body Parts Ascendant/First House Ascendant represents your entire physical body and among the body parts it represents your head and brain. Second House Second house represents the face, eyes, teeth, tongue and mouth. Third House Third
Cross-Site Scripting (XSS)
Cross Site Scripting (XSS) enables attackers to inject malicious script into web pages by targeting vulnerability in security of web applications.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
Reflected (Non - Persistent) XSS : Victims are targeted individually
and no script is injected at the
trusted site’s server. This attack is delivered to victims through email or
from some other website. The bait could be a URL pointing towards a trusted
site, clicking which will execute the malicious script. The injected attack is
not stored within the web application itself and only users who opened a
malicious link are victimized, hence, called non persistent XSS.
Understand how XSS works through this sequence diagram I created for you
Understand how Cross Site Scripting works through this sequence
Other type of web attack are Cross Site Request Forgery (CSRF) & SQL Injection.
Understand how XSS works through this sequence diagram I created for you
 |
| XSS Sequence Diagram |
Understand how Cross Site Scripting works through this sequence
- First, the attacker
constructs a malicious link which will be used later for the web attack.
- Then attacker sends email to
others and convinces them to click on the URL and follow the link.
- Now when user has already
clicked the malicious link, user sends request to server for the web page.
- Server sends say a login
page in response to the client.
- Now the malicious script works
and attaches itself with the response page.
- User enter the login
credentials and click the login button which is actually malicious script
button and unknowingly sends his details to the attacker server.
- Attacker now has access to
the main server.
Such type of attacks are usually done to hack someone's bank account to transfer funds or getting access to social profile of famous and influential people.
Comments
Post a Comment