Hello everybody and welcome back.
And from now on we cover two types of the tax which is the story the success attack and the reflected
excesses attack this one as we can see we covered and it basically leaves this hallowed window open
all the time for anyone who is it and they reflected exercise attack is basically what we sent in the
previous videos over link to the victim now I also try to show you how you can gather the cookies with
these simple HDP server running but that couldn't and didn't seem to work if you wanted to you can search
online how to do it more accurate and more better since I believe I made a mistake in some of the uh
syntax of the comment but it doesn't matter for now on since there is another attack that I want to
show you.
So basically what happens if you wanted to change the looks of a certain website you can also.
You can also do that with the exercise attack and with the stored excess attack which is all there are
a lot more dangerous since it can be used to ruin the European nation and the world well basically the
reputation of a certain company.
For example if you were to find the website the honorable to be stored X assess attack.
You could for example change all of its pictures then Uh may maybe upload your own age to your mail
file.
So it shows another website entirely and it would ruin the reputation of the website itself.
But uh luckily that is not really that common attack.
I will show you how to do it right now.
So first of all before I continue on to make sure that my intercept is off.
Good.
So let us go on to our little machine.
So when I do that 168 that one dot six.
Now where we want to go is we want to go right here motel day I believe that is how you pronounce it.
Not really sure.
And right here we want to go to the O W 2013.
2013.
Yeah.
And cross-eyed scripting attack.
Let me just find Dom injection and HDMI all five storage now.
Now you can see that this leads us to a certain web page which basically I believe is used to uh store
something.
So let us just type here tool onto the one and add the new and we can see added key tool to session
storage and we can see it added our word as an item one to the storage and you can also change the storage
type right here.
So we cannot write too.
Right.
Right here we can add Item 2 as a local storage type and as well it will add it right here.
So these are the totals that we added right here.
But no let's try to exploit this with the cross site scripting Dom injection.
So what we want to do.
Well first of all type the code in a leaf pad so you can see it better than I will copy paste it in
the website to see if it works.
What we want to do is for example we want to change the look or the h the amount the file itself in
order to show something else instead of the.
Instead of that page so let us do that.
We want to type here.
Image source.
So first open up the airway bracket and then type your image.
Source equals X on error equals then type here the number quotes document not body dot inner.
I believe it is inner inner H CML equals then single quote or apostrophe can open up the header let's
say in the header let's say it says you have been hacked for example.
Now you can put anything you white one here you can even put something else if you want to.
Especially if you know the yellow script and the HMO you can type anything you want.
So what we want to do right now is close the header with this comment so open brackets then slash then
H1 basically the H1 stands for the header we decided the one which is I believe the biggest the header
version you can use not really sure.
Not really that great that h the AML and what we want to do is close a single quote then close double
quotes and add the error we brackets.
So let me just check out once again we have a single quote open here we closed it right here.
Double quote open here we closed it right here.
So let us try to see if this will work.
I believe it should.
Unless I have some kind of an error in the syntax.
So here let us instead of to type our code and here let's just say three and add new and as you can
see it changes the entire page.
Indeed.
You have been hacked format or our header that we've written two seconds ago.
Now let me just check for someone visiting.
I don't think that it will stay there.
I did this yesterday I should remember but I really don't so let us just visited once again.
Always right here than the cross-eyed scripting Dom injection h the email storage and no it does not
but it doesn't matter even we know now that this is more ball to the example.
A point made to the exercise.
Um injection or not injection access scripting attack as we can see we managed to change the inner H
to a mouth uh page with this right here and it changed the entire page for us now.
As I said this attack is used to growing the reputation of a certain of a certain company for example
especially if it is the store let's assess the taxes if this were stored.
Now everyone who visits this page would see this or for example if if you were to change some of the
pictures on the web page E2 they would see a different pictures or basically anything that you put in
the HDMI code with your access injection.
So that was about it for the historical it was rather short and in the next one I'll show you a few
tools that you can use in order to automate the cross-eyed scripting attack.
So I hope I see you in the next lecture and Taker my.