Stellar Astrology (Nadi Astrology) is a predictive system of astrology which gives importance to houses, constellation & sub lord signified by a planet depending upon its degree in the astrological chart. In this system, a planet gives results not on the basis of its natural significations or the houses it owns but on the combination of houses signified by the planet, its constellation lord & the sub lord. A single house is not capable of giving any result & it is very difficult to assess results of a planet without looking at its constellation lord & sub lord. For eg: Second house signifies a number of things but we cannot pinpoint anything unless we see the other houses that the planet is signified through itself, star lord or sub lord. If the planet is also signifying the eleventh house, then either it can mean "Gain/Addition of a member in the family" or "Gain of money & assets" - those who follow astrology knows the second house
Cross-Site Scripting (XSS)
Cross Site Scripting (XSS) enables attackers to inject malicious script into web pages by targeting vulnerability in security of web applications.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
Reflected (Non - Persistent) XSS : Victims are targeted individually
and no script is injected at the
trusted site’s server. This attack is delivered to victims through email or
from some other website. The bait could be a URL pointing towards a trusted
site, clicking which will execute the malicious script. The injected attack is
not stored within the web application itself and only users who opened a
malicious link are victimized, hence, called non persistent XSS.
Understand how XSS works through this sequence diagram I created for you
Understand how Cross Site Scripting works through this sequence
Other type of web attack are Cross Site Request Forgery (CSRF) & SQL Injection.
Understand how XSS works through this sequence diagram I created for you
 |
| XSS Sequence Diagram |
Understand how Cross Site Scripting works through this sequence
- First, the attacker
constructs a malicious link which will be used later for the web attack.
- Then attacker sends email to
others and convinces them to click on the URL and follow the link.
- Now when user has already
clicked the malicious link, user sends request to server for the web page.
- Server sends say a login
page in response to the client.
- Now the malicious script works
and attaches itself with the response page.
- User enter the login
credentials and click the login button which is actually malicious script
button and unknowingly sends his details to the attacker server.
- Attacker now has access to
the main server.
Such type of attacks are usually done to hack someone's bank account to transfer funds or getting access to social profile of famous and influential people.
Comments
Post a Comment