In the age of social media and Instagram, people are becoming more and more influenced by the lifestyles they see on social media. This gives a rise to aspirations to attain wealth and live a very comfortable if not a luxurious life. Not everyone is blessed with a good amount of wealth, born in an affluent family or have a high income. It is good to work hard towards your goals and achieve success over time but even though most people want to become wealthy, they just don't get it. We all have seen a prince marrying an ordinary woman in fairy tales. In Korean drama, it is very common to see an extremely rich man marrying an ordinary woman or vice versa. Marrying a rich man/woman can be a shortcut for someone to escape poverty and attain the desired level of wealth and financial freedom. During my consultations, several people come up to me with these questions and through this article I want to guide you to find the best approach for your life based on your planetary placemen...
Cross-Site Scripting (XSS)
Cross Site Scripting (XSS) enables attackers to inject malicious script into web pages by targeting vulnerability in security of web applications.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
There are two types of Cross Site Scripting:
Stored (Persistent) XSS : Malicious script is injected by the attacker at the trusted site’s server. It could be present in the database, message forum or comment field. Every time users requests for this information they also retrieves the malicious script. This type of attack does not require targeting victims individually and continue to attack victims when they request data associated with malicious script, hence, called persistent XSS.
Reflected (Non - Persistent) XSS : Victims are targeted individually
and no script is injected at the
trusted site’s server. This attack is delivered to victims through email or
from some other website. The bait could be a URL pointing towards a trusted
site, clicking which will execute the malicious script. The injected attack is
not stored within the web application itself and only users who opened a
malicious link are victimized, hence, called non persistent XSS.
Understand how XSS works through this sequence diagram I created for you
Understand how Cross Site Scripting works through this sequence
Other type of web attack are Cross Site Request Forgery (CSRF) & SQL Injection.
Understand how XSS works through this sequence diagram I created for you
 |
| XSS Sequence Diagram |
Understand how Cross Site Scripting works through this sequence
- First, the attacker
constructs a malicious link which will be used later for the web attack.
- Then attacker sends email to
others and convinces them to click on the URL and follow the link.
- Now when user has already
clicked the malicious link, user sends request to server for the web page.
- Server sends say a login
page in response to the client.
- Now the malicious script works
and attaches itself with the response page.
- User enter the login
credentials and click the login button which is actually malicious script
button and unknowingly sends his details to the attacker server.
- Attacker now has access to
the main server.
Such type of attacks are usually done to hack someone's bank account to transfer funds or getting access to social profile of famous and influential people.