Free Licenses.Blogspot.Com: Computer Tips

Showing posts with label Computer Tips. Show all posts

New Blog for New Things

New Blog for New Things

Hey Guys, How are you... I started a new blog .Everyone kindly please visit the blog. Blog Link:- http://seurityguy.blogspot.in/ I...

+ Read more »

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div>
<h2 style="text-align: center;">
<span style="color: red;">Bypassing the XSS Filters :<br />Advanced XSS Tutorials for Web application Pen Testing</span></h2>
<br /></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
Hi friends, last time, i explained what is XSS and how an attacker can inject malicious script in your site. As i promised earlier, i am writing this advanced XSS tutorial for you(still more articles will come)</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" imageanchor="1" style="color: #888888; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes, website owner use XSS filters(WAF) to protect against XSS vulnerability.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: if you put the <scirpt>alert("hi")</scirpt></span></div>
, the Filter will <span class="IL_AD" id="IL_AD5" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escape</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> the "(quote) character , so the script will become</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>alert(>xss detected<)</script></blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now this script won't work. Likewise Filters use different type of filtering method to give protection against the XSS.  In this case, we can use some tricks to bypass the filter.  Here i am going to cover that only. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
1.Bypassing magic_quotes_gpc</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">The magic_quotes_gpc=ON is a PHP setting(configured in PHP.ini File) , it </span><span class="IL_AD" id="IL_AD4" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escapes</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the every ' (single-quote), " (double quote) and \  with a backslash automatically.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><scirpt>alert("hi");</scirpt></span> will be filtered as <script>alert(\hi\)</script>.so the script won't work now.<br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This is well known filtering method, but we can easily bypass this filter by using ASCII characters instead.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:  alert("hi"); can be converted to</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">so the script will become <script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script>.  In this case there is no "(quotes) or '(single quotes) or / so the filter can't filter this thing.  Yes, it will successfully run the script.</span><br />
<div class="info_box" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode() is a javascript function that converts ASCII value to Characters.</div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<b style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">How to convert to ASCII values?</b><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">There are some online sites that converts to ASCII character. But i suggest you to use</span><a href="https://addons.mozilla.org/en-US/firefox/addon/hackbar/" style="background-color: white; color: #888888; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-decoration: none;">Hackbar Mozilla addon </a><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">After installing hackbar add on ,press F9.  It will open the small box above the url bar. click the XSS->String.fromCharCode()</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now it will popup small window. enter </span><span class="IL_AD" id="IL_AD6" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the code</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">for instance alert("Hi").  click ok button.  Now we got the output.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">copy the code into the <script></script> inside and insert in the vulnerable sites</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: </i><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=<script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
2.HEX Encoding</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">we can encode our whole script into HEX code so that it can't be filtered. </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For example:  <script>alert("Hi");</script> can be convert to HEX as:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now put the code in the vulnerable site request.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For ex: </span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> Converting to HEX:</b><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This site will convert to hex code: http://centricle.com/tools/ascii-hex/ </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
3.Bypassing using Obfuscation</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Some website admin put the </span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">script</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">,</span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">alert</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> in restricted word list.  so whenever you input this</span><span class="IL_AD" id="IL_AD3" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">keywords</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">, the filter will remove it and will give error message like "you are not allowed to search this". This can bypassed by changing the case of the keywords(namely Obfuscation). </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>ALeRt("hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This bypass technique rarely works but giving trial is worth. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
4. Closing Tag</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes putting "> at the beginning of the code will work. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
"><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This will end the previous opened tag and open our script tag.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q="><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b>Conclusion:</b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">From above article, it is clear that XSS filters alone not going to protect a site from the XSS attacks. If you really want to make your site more secure, then ask PenTesters to test </span><span class="IL_AD" id="IL_AD8" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">your application</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> or test yourself.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Also there are lot of different filter bypassing technique, i just covered some useful techniques for you.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #cc0000;">Disclaimer:</span></b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This article is intended for educational purpose only.</span></div>

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing Hi friends, last time, i explained what is XSS and...

+ Read more »

What is XSS (Cross Site Scripting)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" /></a></div>
<br />
<b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">What is XSS?</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to run his own client side scripts(especially Javascript) into web pages viewed by other users.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In a typical XSS attack, a hacker inject his malicious javascript code in the legitimate website . When a user visit the specially-crafted link , it will execute the malicious javascript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms. </span><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> </b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example :</b><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Let us imagine, a hacker has discovered XSS vulnerability in Gmail and inject malicious script. When a user visit the site, it will execute the malicious script. The malicious code can be used to redirect users to fake gmail page or capture cookies. Using this stolen cookies, he can login into your account and </span><span class="IL_AD" id="IL_AD9" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">change password</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.It will be easy to understand XSS , if you have the following prerequisite:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br />
<ul style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Strong Knowledge in HTML,javascript(<a href="http://w3schools.com/" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Basic Knowledge in HTTP client-Server Architecure(<a href="http://101.lv/learn/CGIperl/ch2.htm" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">[optional]Basic Knowledge about server side programming(php,asp,jsp)</li>
</ul>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span class="Apple-style-span" style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 19px; font-weight: bold;">XSS Attack:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Step 1: Finding Vulnerable Website</b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Hackers use google dork for finding the vulnerable sites for instance  "?search=" or ".php?q=" .  1337 target specific sites instead of using google search.  If you are going to test your own site, you have to check every page in your site for the vulnerability. </span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Step 2: Testing the Vulnerability:</b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">First of all, we have to find a input field so that we can inject our own script, for example: search box, username,password or any other input fields.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><i>Test 1 :</i></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Once we found the input field, let us try to put some string inside the field, for instance let me input "BTS". It will display the  result .</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now right click on the page and select view source.   search for the string "BTS" which we entered in the input field.  Note the location where the input is placed.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="69" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><i>Test 2:</i></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now we are going to check whether the server sanitize our input or not.  In order to do this , let us input the <script> tag inside the input field. </span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"></p>
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" width="200" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>
<p>
<span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">View the source of the page . Find the location where input displayed place in previous test.</span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"></p>
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" width="250" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>
<p>
<br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">Thank god, our code is not being sanitized by the server and </span><span class="IL_AD" id="IL_AD6" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">the code</span><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"> is just same as what we entered in the field. If the server sanitize our input, the code may look like this </span><i style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span class="Apple-style-span" style="color: rgb(153, 0, 0);"><script></span></i><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">. This indicates that the website vulnerable to XSS attack and we can execute our own scripts .</span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><b style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span class="Apple-style-span" style="color: rgb(204, 0, 0);">Step 3: Exploiting the vulnerability</span></b><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">Now we know the site is somewhat vulnerable to XSS attack.  But let us make sure whether the site is completely vulnerable to this attack by injecting a full javascript code.  For instance, let us input <script>alert('BTS')</script> .</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s1600/injecting-XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="31" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s200/injecting-XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now it will display pop-up box with 'BTS' string. Finally, we successfully exploit the XSS .  By extending the code with malicious script, a hacker can do steal cookies or deface the site and more.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span class="Apple-style-span" style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 19px; font-weight: bold;">Types of XSS Based on persisting capability:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Based one Persistence capability, we can categorize the XSS attack into two types namely Persistent and Non-Persistent.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">Persistent XSS:</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">The Persistent or Stored XSS attack occurs when the malicious code submitted by attacker is saved by the server in the database, and then permanently it will be run in the normal page.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Example:   </i><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Many websites host a support forum where registered users can ask their doubts by posting message  , which are stored in the database.  Let us imagine , An attacker post a message containing malicious javascript code instead.  If the server fail to sanitize the input provided, it results in execution of injected script.  The code will be executed whenever a user try to read the post. If suppose the injected code is cookie stealing code, then it will steal cookie of users who read the post. Using the cookie, attacker can take control of </span><span class="IL_AD" id="IL_AD5" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">your account</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">Non-Persistent XSS:</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Non-Persistent XSS, also referred as Reflected XSS , is the most common type of XSS found now a days. In this type of attack, the injected code will be send to the server via HTTPrequest.  The server embedd the input with the html file and return </span><span class="IL_AD" id="IL_AD8" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the file</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">(HTTPResponse) to browser.  When the browser executes the HTML file, it also execute the embedded script.  This kind of XSS vulnerability frequently occur in search fields.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example:</i><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Let us consider a project </span><span class="IL_AD" id="IL_AD4" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">hosting</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> website.  To find our favorite project, we will just input the related-word in the search box .  When searching is finished, it will display a message like this "search results for yourword " .  If the server fail to sanitize the input properly, it will results in execution of injected script.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In case of reflected XSS attacks, attacker will send the specially-crafted link to victims and trick them into click the link. When user click the link, the browser will send the injected code to server, the server reflects the attack back to the users' browser.  The browser then executes the code .</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In addition to these types, there is also third  type of attack called DOM Based XSS attack, i will explain about this attack in later posts.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #990000;">What can an attacker do with this Vulnerability?</span></b><br />
<ul class="checklist" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Stealing the Identity and Confidential Data(<span class="IL_AD" id="IL_AD3">credit</span> card details).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Bypassing restriction in websites.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Session Hijacking(Stealing session)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Malware Attack</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Website Defacement</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Denial of Service attacks(Dos)</li>
</ul>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #38761d;"></span></b><br /><div style="margin: 0px;">
<b><span class="Apple-style-span" style="color: #38761d;"><i><b>Bypassing The XSS Filter Technique: XSS Tutorial Part 2(Coming Soon..!!)</b></i></span></b></div>
<div>
<b><span class="Apple-style-span" style="color: #38761d;"><i><br /></i></span></b></div>
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #cc0000;">Disclaimer:</span></b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This article is intended for educational purpose only.</span></div>
</div>

What is XSS (Cross Site Scripting)

What is XSS? Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to...

+ Read more »

HOW TO PROTECT YOUR DATA

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span class="hps" style="box-sizing: border-box;"><span lang="EN" style="box-sizing: border-box;"><span style="box-sizing: border-box; font-size: medium;">ZERO-DAY A FUTURE THREAT, AND HOW TO PROTECT YOUR DATA.</span><o:p style="box-sizing: border-box;"></o:p></span></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span class="hps" style="box-sizing: border-box;"><b style="box-sizing: border-box;"><span lang="EN" style="box-sizing: border-box;"><span style="box-sizing: border-box; color: red;">ABSTRACT</span><o:p style="box-sizing: border-box;"></o:p></span></b></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">It is known that practically all software has security flaws (programming problems that give individuals opportunities to explore previously nonexistent), many of these vulnerabilities not yet discovered, and hundreds are corrected every month through the packages available organizations affected, sometimes new versions and updates.<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">The term " zero day " (zero hour or 0day ) refers to the unknown nature of security breaches for companies , this attack tries to exploit computer application vulnerabilities that are unknown yet even by software manufacturers . Explaining in a simple and generally, there are two types of "exploit", or flaws / vulnerabilities that can be used in attacks. Those found by security companies and found by hackers whose purpose is exploration.<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">The issue is that some hackers choose to disclose newly discovered failures to apply the necessary corrections are sometimes rewarded for it with prizes. The “black hats” usually prefer to save for their own benefit a future attack or to share with attackers before the developer of software knows about the vulnerability.</span><span style="background-attachment: scroll; background-color: #fafafa; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; color: red; font-size: x-small;"><span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif;"><br style="box-sizing: border-box;" /></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="box-sizing: border-box; color: red;"><span class="hps" style="box-sizing: border-box;"><b style="box-sizing: border-box;"><span lang="EN" style="box-sizing: border-box;">HISTORY</span></b></span><b style="box-sizing: border-box;"><span lang="EN" style="box-sizing: border-box;"> <span class="hps" style="box-sizing: border-box;">ALGORITHM</span> <span class="hps" style="box-sizing: border-box;">AES</span></span></b></span><b style="box-sizing: border-box;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><o:p style="box-sizing: border-box;"></o:p></span></b></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">Regarding PRIVACY is important to know how to control the availability and exposure of your data , the AES algorithm was proposed to replace DES, NIST ("National Institute of Standards and Technology U.S.") held a competition (The selection process began in 1997 and ended in 2000 with the victory of the Rijndael algorithm written by Joan Daemen and Vincent Rijmen) for it to be made an algorithm that would be called "Advanced Encryption Standard " that meets the following specifications: algorithm publicly defined;<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">Being a symmetric cipher block; Designed for the key size can be increased; Deployable in both hardware and software; Powered freely, this algorithm Encrypt and Decrypt using an encrypted key and blocks, both sizes of 128,192 or 256 bits.<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span class="hps" style="box-sizing: border-box;"><span lang="EN" style="box-sizing: border-box;">I will cite</span></span><span lang="EN" style="box-sizing: border-box;"> <span class="hps" style="box-sizing: border-box;">and explain</span> <span class="hps" style="box-sizing: border-box;">how an</span> <span class="hps" style="box-sizing: border-box;">open source tool</span> <span class="hps" style="box-sizing: border-box;">very important</span>: </span><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">TrueCrypt (encryption on-the-fly OTFE) to confidential files , folders and entire drives on your PC , encryption, it can create a virtual encrypted disk or encrypt a partition , individual algorithms supported by TrueCrypt are AES, Serpent and Twofish, additionally , five different combinations of cascaded algorithms are available : AES-Twofish, AES-Twofish-Serpent, Serpent-AES, Serpent-Twofish-AES and Twofish-Serpent. Uses RIPEMD-160, SHA-512 and Whirlpool as hashing functions.<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; color: red; font-size: x-small;"><span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif;"><br style="box-sizing: border-box;" /></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><b style="box-sizing: border-box;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><span style="box-sizing: border-box; color: red;">SOLUTION</span><o:p style="box-sizing: border-box;"></o:p></span></b></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">Due to the increasing amount of 0day discovered, I will present one of the safest techniques to protect the security of your data, first we store our data in a nonvolatile memory device (eg USB stick or external HD, is the storage, where once recorded, the data are not lost when you remove the power source), we will also create a volume HIDDEN, at worst it can happen that you are forced by somebody to reveal the password to an encrypted volume . There are situations where you cannot refuse to reveal the password, for example, due to extortion. The method is to use a volume "HIDDEN" that allows you to solve such situations without revealing the password to your volume true, we actually create two passwords, a password can be used for volume "False" and one for the volume "True".<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<span style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Georgia, 'Times New Roman', serif; font-size: x-small; line-height: 17.59375px;"><br style="box-sizing: border-box;" /></span><span style="background-color: #fdfdfd; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;"></span>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">In case of any extortion can provide the password "Fake" where the attacker will have access, and the information contained in this folder will be irrelevant.<o:p style="box-sizing: border-box;"></o:p></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; color: red; font-size: x-small;"><span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><br style="box-sizing: border-box;" /></span></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; color: red; font-size: x-small;"><span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif;"></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; color: red; font-size: x-small;"><span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif;"><b style="box-sizing: border-box;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;">STEP BY STEP</span></b></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><b style="box-sizing: border-box;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><br style="box-sizing: border-box;" /></span></b></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNRCqz8ZeZjZRdszxFmFoiRq19yWWvZT0bJD3xrzXhWWNl2ROYb3kZeFpGfxCqsYRQz0EzZHYE_RH6m9fzuJKHqwGPGVLokcAyuj41laIoSjU61ULwLX_S1Q4syXVJbocdX91ttS5HE84/s1600/1.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="262" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNRCqz8ZeZjZRdszxFmFoiRq19yWWvZT0bJD3xrzXhWWNl2ROYb3kZeFpGfxCqsYRQz0EzZHYE_RH6m9fzuJKHqwGPGVLokcAyuj41laIoSjU61ULwLX_S1Q4syXVJbocdX91ttS5HE84/s640/1.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgCWRdVnoitwJtuRP8r7HpfW3P-Wq0SPa8-7H1gVZL8Nl3QkGhsxjlLApc_1xRVCqJqJH8rp_E1NEsXqPOEUxscA5FXInfssE8mgajb-yhTmLiKhQ36t8p6MZK6puRuVNoklj8OZ1JAkI/s1600/2.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgCWRdVnoitwJtuRP8r7HpfW3P-Wq0SPa8-7H1gVZL8Nl3QkGhsxjlLApc_1xRVCqJqJH8rp_E1NEsXqPOEUxscA5FXInfssE8mgajb-yhTmLiKhQ36t8p6MZK6puRuVNoklj8OZ1JAkI/s640/2.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtffgBqvOTs-dz6Rj5e8DpGQq_ZMFcpLFozRitfDWedI8-wi6PbJzXmOSJ3pkRtedVEv8mxx_scazxgP6cvE2M-NF7_vWBS8y2qYrhlG7OzF5l72X_H9-0e5dvA0krca9P9-_WOz3inxQ/s1600/3.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtffgBqvOTs-dz6Rj5e8DpGQq_ZMFcpLFozRitfDWedI8-wi6PbJzXmOSJ3pkRtedVEv8mxx_scazxgP6cvE2M-NF7_vWBS8y2qYrhlG7OzF5l72X_H9-0e5dvA0krca9P9-_WOz3inxQ/s640/3.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaxQIyNUKihXg0SAAtinSFpU4Sk-M7a9Lekp3aHebKF-34QrpfmaOzrHfCzZIkbRQn7UUd-XNvf80KATuizuwJIud5RdI5CGTkt2LwnVT4oJb8I7Z4Q90yBZtzb7cl3UmRF3Hdm4E-rj4/s1600/4.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaxQIyNUKihXg0SAAtinSFpU4Sk-M7a9Lekp3aHebKF-34QrpfmaOzrHfCzZIkbRQn7UUd-XNvf80KATuizuwJIud5RdI5CGTkt2LwnVT4oJb8I7Z4Q90yBZtzb7cl3UmRF3Hdm4E-rj4/s640/4.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpRMVQ5RKIB6dzJ7a7WaOi91q1vaQbm27IRis0L6JE7BCOYoP97Z0KDrf4DkJeUnFZ2pSNCtOarq7xw_OGJLt9_TKnohDGlp1sQr4hM6Q_SKIVjTLOq-7FQt7f9Z3XqtvQWxU_L906Vys/s1600/5.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="290" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpRMVQ5RKIB6dzJ7a7WaOi91q1vaQbm27IRis0L6JE7BCOYoP97Z0KDrf4DkJeUnFZ2pSNCtOarq7xw_OGJLt9_TKnohDGlp1sQr4hM6Q_SKIVjTLOq-7FQt7f9Z3XqtvQWxU_L906Vys/s640/5.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqsjLhEy6sESArVl86WkfEdm2XzKIDli7WgBFW1IvwgRlWaIyhH5ZrvyyEY7cXneKqEfj4oPHt_RUV7uFvwVRgvDCSIr8m3iIjNyFkngsFZchG_r3m4gNhKdUR3vkm1eCqd-NXw_lsXbQ/s1600/6.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqsjLhEy6sESArVl86WkfEdm2XzKIDli7WgBFW1IvwgRlWaIyhH5ZrvyyEY7cXneKqEfj4oPHt_RUV7uFvwVRgvDCSIr8m3iIjNyFkngsFZchG_r3m4gNhKdUR3vkm1eCqd-NXw_lsXbQ/s640/6.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4kClxlH7q9rtIw0uo6eKqWbEjVr1xEBGHyItpj0cRfBhvgMv5UVdRASingMeYLayk0i-L5bmBl41rtxuHQIQg9piEOq17wwszJaIO-IhksSyS29uiwZ5tw_gmrtua1X1-sSyM3-_HWfE/s1600/7.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4kClxlH7q9rtIw0uo6eKqWbEjVr1xEBGHyItpj0cRfBhvgMv5UVdRASingMeYLayk0i-L5bmBl41rtxuHQIQg9piEOq17wwszJaIO-IhksSyS29uiwZ5tw_gmrtua1X1-sSyM3-_HWfE/s640/7.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOCUmRoimNVjeOIEcJ-3p_qzPIL1aPTeiCCrWQFiPJZs4eI32JVbNIkNleJb3xCrT-SesC2tJh3tGyaW9Q9ANWKPYZip4Vrrv5UBrEIensXUMK3JZrRmqVHH5MdSabtoedjjXFKBoIlw4/s1600/8.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOCUmRoimNVjeOIEcJ-3p_qzPIL1aPTeiCCrWQFiPJZs4eI32JVbNIkNleJb3xCrT-SesC2tJh3tGyaW9Q9ANWKPYZip4Vrrv5UBrEIensXUMK3JZrRmqVHH5MdSabtoedjjXFKBoIlw4/s640/8.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjptaoa7XjslCWHG7BBcTub5W3UGBqKCrxUwrJFEHQWTDXpqn4H2Sh_bd-_yRwc4ICxqXv_GbZBCDhtn367znAbFFTrNPLpyJ6zPUVAi4sm5ZQHCWORkPhyphenhyphen9wsBWB5UD11xTNqyIuSKdv8/s1600/9.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="278" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjptaoa7XjslCWHG7BBcTub5W3UGBqKCrxUwrJFEHQWTDXpqn4H2Sh_bd-_yRwc4ICxqXv_GbZBCDhtn367znAbFFTrNPLpyJ6zPUVAi4sm5ZQHCWORkPhyphenhyphen9wsBWB5UD11xTNqyIuSKdv8/s640/9.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVh5SFy0OVajfhXIxRAAwwpFbXmuXVZkmKAN-RX_XZrm6RlaeCHCg2UbGKmf_WLDgeMv-ObErijHK-EkFyKsZ0ZI7pT498d1nWZsLyXRF78xqhn7St8NLooHplTp8hn4UXPLkQCOHoa_g/s1600/10.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="310" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVh5SFy0OVajfhXIxRAAwwpFbXmuXVZkmKAN-RX_XZrm6RlaeCHCg2UbGKmf_WLDgeMv-ObErijHK-EkFyKsZ0ZI7pT498d1nWZsLyXRF78xqhn7St8NLooHplTp8hn4UXPLkQCOHoa_g/s640/10.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcUkChp6tqoZYYrhIcjr3yWcDzETGFkh52W3fSq6ArptTOjeBqBMKh9Pn5BgjvcGfvkaAUcrWorWpvQfN-lRaz332xsP1qgVmn5Bh4Fqkv8n-m6mfzedUmsNhO4l2EUPD6uitoDiDSlyg/s1600/11.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcUkChp6tqoZYYrhIcjr3yWcDzETGFkh52W3fSq6ArptTOjeBqBMKh9Pn5BgjvcGfvkaAUcrWorWpvQfN-lRaz332xsP1qgVmn5Bh4Fqkv8n-m6mfzedUmsNhO4l2EUPD6uitoDiDSlyg/s640/11.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsvlCV-0Eleg30-k5gitN_ziEUGjPQILkUdj7FgXomQHn5HS8NSyI3wXtOx_hv6ZPYd5CJU6CO-4WTjtKO-JW-F2Lsbo-1YrfJVdGMxKwUCUE-BzSzCPu_VS9GLUMI5op5qXYuse0Uyn4/s1600/12.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="252" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsvlCV-0Eleg30-k5gitN_ziEUGjPQILkUdj7FgXomQHn5HS8NSyI3wXtOx_hv6ZPYd5CJU6CO-4WTjtKO-JW-F2Lsbo-1YrfJVdGMxKwUCUE-BzSzCPu_VS9GLUMI5op5qXYuse0Uyn4/s640/12.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXCZpHGjyPKBQ7V71d5Jx9sqBUcjwROg-h7GEwXef3ddEy_mVJ0WzOSCDY-TYpnJjZy4qHEId5WyArSsMvvOmYL2MfkOKa415aEBTE6WcpSv05Bp_vK2HO7rSOY3Xk-8o6SBp9329j1R8/s1600/14.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="234" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXCZpHGjyPKBQ7V71d5Jx9sqBUcjwROg-h7GEwXef3ddEy_mVJ0WzOSCDY-TYpnJjZy4qHEId5WyArSsMvvOmYL2MfkOKa415aEBTE6WcpSv05Bp_vK2HO7rSOY3Xk-8o6SBp9329j1R8/s640/14.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVXvYD_8obCGV_9W4IY0h3oX-Ojea064oqd07Abm2NGm4EIpSJHnNlplT3HxjAA51sU9ZWCZEg2wU3vfDPq4cDU6i30dGgqLQ6VQEkwHxypQbhc5pex1khd1Kn8ORt-7yyfVIga-CeNVs/s1600/15.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVXvYD_8obCGV_9W4IY0h3oX-Ojea064oqd07Abm2NGm4EIpSJHnNlplT3HxjAA51sU9ZWCZEg2wU3vfDPq4cDU6i30dGgqLQ6VQEkwHxypQbhc5pex1khd1Kn8ORt-7yyfVIga-CeNVs/s640/15.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiheRTpnQUki6GnNG67siiMBMhsGiWaY8Oh6C-4Rxh4sPDGwZP9nQxS7Xr0h_2unWF1MrTZpcOCNwX_QSy6tY2hXI4xaKzxdZHGL0eJH4VwfNDXOTD4odWW_LAAH0UeCYkOUUd_QPMXn8c/s1600/16.png" imageanchor="1" style="-webkit-transition: all 0.4s ease-in-out; box-sizing: border-box; color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.4s ease-in-out;"><img border="0" height="238" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiheRTpnQUki6GnNG67siiMBMhsGiWaY8Oh6C-4Rxh4sPDGwZP9nQxS7Xr0h_2unWF1MrTZpcOCNwX_QSy6tY2hXI4xaKzxdZHGL0eJH4VwfNDXOTD4odWW_LAAH0UeCYkOUUd_QPMXn8c/s640/16.png" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="640" /></a></span></div>
<div class="separator" style="background-color: #fdfdfd; box-sizing: border-box; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px; text-align: center;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><br style="box-sizing: border-box;" /></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><b style="box-sizing: border-box;">This article shows a technique for case one day you will be forced to disclose information, learn how to get out of this trap.</b></span></span><br />
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><b style="box-sizing: border-box;"><o:p style="box-sizing: border-box;"></o:p></b></span></span></div>
<div class="MsoNoSpacing" style="background-color: #fdfdfd; box-sizing: border-box; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 11px; line-height: 17.59375px;">
<span style="box-sizing: border-box; font-family: Georgia, 'Times New Roman', serif; font-size: x-small;"><span style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0% 0%; background-repeat: repeat repeat; box-sizing: border-box;"><b style="box-sizing: border-box;">It's also a great way to protect your company's data and a security strategy that should apply to stay quiet with your important data.</b></span></span></div>
</div>

HOW TO PROTECT YOUR DATA

ZERO-DAY A FUTURE THREAT, AND HOW TO PROTECT YOUR DATA. ABSTRACT It is known that practically all software has security flaws (p...

+ Read more »

Make your computer welcomes you on start up

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 style="text-align: left;">
Make your computer welcomes you when you log on.</h2>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;"><br /></span>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;"><br /></span>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">This is very simple and cool trick to impress your friend.</span><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">in this trick when you start you computer it will say "Welcome Back,your name"</span><br />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">and can use your own msg..</span><br />
<br />
<div class="separator" style="background-color: white; clear: both; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD50NI_W0wDMeL3NSo_tavAzS15M_BlzVqt1n5x3HFYiT3XNe3X5FDab1_o4C9JvobiPph4lIhyphenhyphenb1h3V1MqMdEoEtEqyBVtnux_q_9Wj6XHXzZeml-WhyecceuRSSG2BuHHNjKcZZbYdIr/s1600/computer-will-talk-to-you-and-welcome-you.jpg" imageanchor="1" style="color: black; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD50NI_W0wDMeL3NSo_tavAzS15M_BlzVqt1n5x3HFYiT3XNe3X5FDab1_o4C9JvobiPph4lIhyphenhyphenb1h3V1MqMdEoEtEqyBVtnux_q_9Wj6XHXzZeml-WhyecceuRSSG2BuHHNjKcZZbYdIr/s320/computer-will-talk-to-you-and-welcome-you.jpg" style="border-width: 0px;" width="288" /></a></div>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">isn't it cool..!!</span><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">lets start the tricks.</span><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">just follow these steps.</span><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">1.Open notepad and copy the code in it.</span><br />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">code is.</span><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<b style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;"><span style="color: #cc0000;">Dim speaks, speech<br />speaks="Welcome Back, yourname"<br />Set speech=CreateObject("sapi.spvoice")<br />speech.Speak speaks</span></b><br />
<div style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">
<br /></div>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">2. Put your name at the place of your name.</span><br />
<div style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">
3. Save this with the name of <b><span style="color: #cc0000;">welcome.vbs</span></b></div>
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">4.  Copy File </span><b style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;"><span style="color: #cc0000;">w</span></b><span style="background-color: white; color: #cc0000; font-family: 'PT Sans Narrow'; font-size: 16px; font-weight: bold; line-height: 20.796875px;">elcome.vbs</span><span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;"> and paste it in bellow address.</span><br />
<div style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">
<br />
<b>For Windows-7 user.</b><br />
<br />
C:\Users\Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup</div>
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<b style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">For Windows-Xp user.</b><br />
<br style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;" />
<span style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">C:\Documents and Settings\All Users\Start Menu\Programs\Startup</span><br />
<div style="background-color: white; color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">
<br /></div>
<div style="background-color: white;">
<div style="color: #444444; font-family: 'PT Sans Narrow'; font-size: 16px; line-height: 20.796875px;">
done, now just do log of your computer and log in again...it will welcome you.</div>
<br /></div>

<script language="JavaScript1.1" src="http://bdv.bidvertiser.com/BidVertiser.dbm?pid=562652&bid=1411471" type="text/javascript"></script>
<noscript><a href="http://www.bidvertiser.com">pay per click</a></noscript>
</div>
</div>

Make your computer welcomes you on start up

Make your computer welcomes you when you log on. This is very simple and cool trick to impress your friend. in this trick when you s...

+ Read more »