This methodology of knowing if a person is meant to become rich is not a theory, it is actually practiced and applied on horoscopes to predict about a person's life and to figure out if a person is meant to become really successful and will become rich in his life. In a horoscope, there are 12 houses and 9 planets (excluding Uranus, Neptune and Pluto). Most astrologers see 1st, 2nd, 5th, 6th, 9th, 10th and 11th house, and their lords to see if a person has the capability to become rich and successful. Some also take the benefic aspects from Jupiter, Venus, Mercury and Moon into account.The actual answer does not come through this way. To accurately know if a person is meant to become rich and successful you need to see these three things: The Person's Intelligence Benevolence of The Planets Support from The Time When these three things combine then a person actually becomes successful. I am sure that you find this very logical.
Cross-Site Scripting (XSS)
Cross Site Scripting (XSS) enables attackers to inject malicious script into web pages by targeting vulnerability in security of web applications.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
Reflected (Non - Persistent) XSS : Victims are targeted individually
and no script is injected at the
trusted site’s server. This attack is delivered to victims through email or
from some other website. The bait could be a URL pointing towards a trusted
site, clicking which will execute the malicious script. The injected attack is
not stored within the web application itself and only users who opened a
malicious link are victimized, hence, called non persistent XSS.
Understand how XSS works through this sequence diagram I created for you
Understand how Cross Site Scripting works through this sequence
Other type of web attack are Cross Site Request Forgery (CSRF) & SQL Injection.
Understand how XSS works through this sequence diagram I created for you
 |
| XSS Sequence Diagram |
Understand how Cross Site Scripting works through this sequence
- First, the attacker
constructs a malicious link which will be used later for the web attack.
- Then attacker sends email to
others and convinces them to click on the URL and follow the link.
- Now when user has already
clicked the malicious link, user sends request to server for the web page.
- Server sends say a login
page in response to the client.
- Now the malicious script works
and attaches itself with the response page.
- User enter the login
credentials and click the login button which is actually malicious script
button and unknowingly sends his details to the attacker server.
- Attacker now has access to
the main server.
Such type of attacks are usually done to hack someone's bank account to transfer funds or getting access to social profile of famous and influential people.
Comments
Post a Comment