Hello and welcome to the next video. Cross-site scripting
attack.
Now in this video, what we are going to learn. So
you're going to learn the basics. Of course, I skipped in the back and
then we will perform this attack on Daggett using birth
Street.
So let's open the lab setup.
Now guys, I'm inside Kali Linux machine. And
in the in the previous video you have laundered, how you can
perform injection attack in the website.
Using manual methods. Now, here in
this video. We are learning about cross-site scripting attack, which
is also call Alexis on the
Target on the same jacket, with the help of bird food using mental
math.
So first of all, we're going to perform attack on the
website.
Without the Temptation. And then we will
Access the website and then we'll perform again.
So we have a Target here. You can see
that I've been logged out from the
website, right?
And website is
also open. Here in deception Beyond, check the
proxy again. Alright, so I
removed my proxy from my browser. Then
I visited the website again, so I need to change the
proxy again. So let me see is a proxy.
References here and then
you can click settings. Then you
can select men with proxy consideration set IP address
in port number Etc. All right.
So you can see here. There's a search box. So I
will try to perform.
Cross-site scripting the dog using the search
box because that's why.
So, for example, let me type my
name here. Let me click go.
Suburb seedhouse Interceptor. Direct question
side.
The proxy intercept section. Here we
go.
Great.
Now you can check inside H-E-B
Street. You can also use this one. The
same request is available here.
So search for Google to
Sunol and go Botanical to go with means. I need to
change the parameter of search for now.
The value is Sunol. I
need to change it. So, let me
provide you more information, about course, ice skating
at that witch.
Induction too bad, we should use here.
So let me know this one. So first of all, I'm going to use
this one.
Script open 10.
Hello.
Inside alert, you can type string
here. It will type it
and then script law. So this is a basic JavaScript.
Volk's means
that process Captain Hollywood is
available inside the website. So Lexie,
let me take my name here. So
that script open than other than inside that
provided the string hair than
skip close to alert means. Basically it will
generate a pop-up box and inside pop-up box will show
you the value and evaluation.
If Casa scripting will images of label inside the
website, so you will see a pop-up box and inside, pop-up
box. You will see soon enough.
Right, so I will try to change the value.
So let me copy this.
All right. Let me go inside breakfast here
and let me
send. First of all, this request into repeater
to send it to repeat it here,
right?
Panda.
If I could send you.
All right.
Now, let me change this.
And let me send Discovery script open
alert string and script close.
All right, if I send this.
Wesley, Richard work and rendering
is not available here.
So let me right click
here and let me open it inside the browser. So
show response in browser.
Copy this.
And let me paste inside my
browser and hit enter and have
you go. So you can see here that it is gender to
the pop-up box and inside pop-up box. You can see my
name. Some great. Let me
change the settings. Against example, if I change here.
Example.
Hello at 1.
All right, we can also try this one. So.
All right, right? Click here show response
in browser, copy this link. Open H.
Let's try again.
And if you go so you can see here that we can see it.
Bubba box and inside bubble box. We can see the value. It means
that process could bring one Liberties of label
inside this website and this website is highly one.
All right, I got to go and perform cuz it's getting attack. Can
gather more information.
Great now.
What I'm doing here now, I'm
logging inside the website.
So let me change the proxy settings
came and I will try to
steal cookies. So that's why I'm logging inside. So no
proxy. Okay, let me
open.
The website a game test PS3.
One, the web.com.
alright, then clicks sign up here
and
Let me type the right. Username and password test
and test clicks, login.
All right.
No, let me change the proxy settings again so that
we can intercept trick question rib. Sweet. So
the difference is now we're locked in.
Manual. Proxy. Configuration.
Okay.
All right. Now let me refresh this page. So refresh
it.
Intercept request in Bob sweets,
open website. Now.
Let me go inside proxy. Here we
go. So this is the request. My last request.
All right.
Now.
Example, if I send this into a
picture.
And the basic Justice second, what
we need to do here. We need to generate a request
from search Buckley sickly we have logged in, but
we need to create.
Request from Facebook so that
we can still go by there. So, we
have logged in,
but now I need to enter something in search box
example.
ABC. All right. Now click go.
It's agenda request. Go inside. Birdfeed rocks.
Check proxy. This is a request. We need
actually.
Search for ABC. But the
difference is we have logged in inside website. So we
should have a cookie. You can see here. We have a cookie.
In the previous request.
Now, send this to repeater great.
And now we can steal this cookie. So how
can insert command
like this? Like JavaScript?
Script alert, and then
I, this is a function document. Cookie, which
can steal cookie.
Hello, we can try this one script. Open alert than document.
Cookie, without any double coats.
So alert document. Let's try
this. So let me know if it is.
Let's change the value there in
Burke Street. And here it
is. And paste.
This one, document. Cookie
scoop close. That's it. So
I can send it. All. Alright, rental
facility is not available.
So I need to right click
here, then request or
show response in browser copy this
and open a new
link inside browser. So
Now we can Beast here and hit enter and
here we go. So you can see here.
We can see the cookie year which is
test and test. This is
the cookie. So we have successfully stolen cookie.
You can see in bird feed that the cookie
was this.
Is a cookie. So what again do
it again? Perform process scripting attack and can steal
cookie and cookie session and
that we can see here that would help.
Of course, as keeping the attack, we can also steal cookie
of a user.
Great, so that's how you can perform cross-site scripting
attack on a website. And that's these are
the manual techniques are methods. You can use
to gather information about this one.
And the next video, we are going to learn about cookie management issues.