Free Licenses.Blogspot.Com: Security

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" /></a></div>
 
What is XSS? Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to run his own client side scripts(especially Javascript) into web pages viewed by other users. In a typical XSS attack, a hacker inject his malicious javascript code in the legitimate website . When a user visit the specially-crafted link , it will execute the malicious javascript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms.   Example :Let us imagine, a hacker has discovered XSS vulnerability in Gmail and inject malicious script. When a user visit the site, it will execute the malicious script. The malicious code can be used to redirect users to fake gmail page or capture cookies. Using this stolen cookies, he can login into your account and change password.It will be easy to understand XSS , if you have the following prerequisite: 
<ul style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Strong Knowledge in HTML,javascript(<a href="http://w3schools.com/" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Basic Knowledge in HTTP client-Server Architecure(<a href="http://101.lv/learn/CGIperl/ch2.htm" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">[optional]Basic Knowledge about server side programming(php,asp,jsp)</li>
</ul>
 XSS Attack: Step 1: Finding Vulnerable Website Hackers use google dork for finding the vulnerable sites for instance  "?search=" or ".php?q=" .  1337 target specific sites instead of using google search.  If you are going to test your own site, you have to check every page in your site for the vulnerability.  Step 2: Testing the Vulnerability: First of all, we have to find a input field so that we can inject our own script, for example: search box, username,password or any other input fields. 
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
 Test 1 : Once we found the input field, let us try to put some string inside the field, for instance let me input "BTS". It will display the  result . 
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
 Now right click on the page and select view source.   search for the string "BTS" which we entered in the input field.  Note the location where the input is placed. 
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="69" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
 Test 2: Now we are going to check whether the server sanitize our input or not.  In order to do this , let us input the <script> tag inside the input field.  
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" width="200" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>

View the source of the page . Find the location where input displayed place in previous test. 
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" width="250" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>

 Thank god, our code is not being sanitized by the server and <span class="IL_AD" id="IL_AD6" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">the code is just same as what we entered in the field. If the server sanitize our input, the code may look like this <script>. This indicates that the website vulnerable to XSS attack and we can execute our own scripts . Step 3: Exploiting the vulnerability Now we know the site is somewhat vulnerable to XSS attack.  But let us make sure whether the site is completely vulnerable to this attack by injecting a full javascript code.  For instance, let us input <script>alert('BTS')</script> . 
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s1600/injecting-XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="31" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s200/injecting-XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
 Now it will display pop-up box with 'BTS' string. Finally, we successfully exploit the XSS .  By extending the code with malicious script, a hacker can do steal cookies or deface the site and more. 
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
 Types of XSS Based on persisting capability: Based one Persistence capability, we can categorize the XSS attack into two types namely Persistent and Non-Persistent. Persistent XSS: The Persistent or Stored XSS attack occurs when the malicious code submitted by attacker is saved by the server in the database, and then permanently it will be run in the normal page. For Example:    Many websites host a support forum where registered users can ask their doubts by posting message  , which are stored in the database.  Let us imagine , An attacker post a message containing malicious javascript code instead.  If the server fail to sanitize the input provided, it results in execution of injected script.  The code will be executed whenever a user try to read the post. If suppose the injected code is cookie stealing code, then it will steal cookie of users who read the post. Using the cookie, attacker can take control of your account. Non-Persistent XSS: Non-Persistent XSS, also referred as Reflected XSS , is the most common type of XSS found now a days. In this type of attack, the injected code will be send to the server via HTTPrequest.  The server embedd the input with the html file and return the file(HTTPResponse) to browser.  When the browser executes the HTML file, it also execute the embedded script.  This kind of XSS vulnerability frequently occur in search fields. Example: Let us consider a project hosting website.  To find our favorite project, we will just input the related-word in the search box .  When searching is finished, it will display a message like this "search results for yourword " .  If the server fail to sanitize the input properly, it will results in execution of injected script. In case of reflected XSS attacks, attacker will send the specially-crafted link to victims and trick them into click the link. When user click the link, the browser will send the injected code to server, the server reflects the attack back to the users' browser.  The browser then executes the code . In addition to these types, there is also third  type of attack called DOM Based XSS attack, i will explain about this attack in later posts. What can an attacker do with this Vulnerability? 
<ul class="checklist" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Stealing the Identity and Confidential Data(credit card details).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Bypassing restriction in websites.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Session Hijacking(Stealing session)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Malware Attack</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Website Defacement</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Denial of Service attacks(Dos)</li>
</ul>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
 <div style="margin: 0px;">
Bypassing The XSS Filter Technique: XSS Tutorial Part 2(Coming Soon..!!)</div>
<div>
 </div>
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
Disclaimer:</div>
This article is intended for educational purpose only.</div>
</div>

What is XSS (Cross Site Scripting)

What is XSS? Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to...

+ Read more »