So hi, everyone, welcome back to this new section in this section, we are going to learn about Clydeside
attacking inside planes, attacking.
We are going to cover Accessors, which is Crossette description.
So before going deep into it, first we need to understand what is across the scripting and what is
the origin of it.
So.
So if you talk about the origin of Crossette scripting, so you would often hear that the term Crossette
is scripting and JavaScript is used simultaneously.
So JavaScript is a blindsight scripting language introduced by Netscape in 1995.
So the main purpose of JavaScript was to make the Web browser perform some task at the client site,
although JavaScript can be used for other purposes, too.
It is most commonly used in the Web browser to implement the client side script that can be used to
alter the Web pages and displayed on the browser, for example, like displaying a Pop-Up Error Message
dialog box.
And we can see when the wrong values entered by the user assuming ads from the Web pages.
So some Hickerson soon found out that that using JavaScript they could read data from Web pages loaded
in Eddison Windows or frames.
So does malicious websites could cross the boundary and interact with content loaded on an entirely
different Web pages.
So that is not related to this.
It's to me, actually.
So districts or was named as a cross site scripting attack.
So to blog this attack, Netscape introduced the same Auchincloss policy under which Dalle Web browser
Palmist JavaScript Lautz in one Web page to only access other Web page if they are from the same domain.
So in other words, we can say that a malicious user could not use our script to read data from any
arbitrary Web page.
So in only 2000.
So the JavaScript attack becomes most famous for making the Web based malicious script in a Web browser
rather than reading contents from the Web pages in the adjacent frame.
So although the e-mail closer to scripting attack has changed over the years and the name remains the
same, and therefore some people get confused as.
As to why it is called that glass that is gripping, so over the years, closer to scripting attack
has been using JavaScript to perform malicious activities such as, we can say, molesting poor scanning
and cataloguing.
So Accessors attack can also be used to inject VBS script ActiveX or Flass into a novel that beat so
JavaScript is so widely used.
So we would also UDR to demonstrate example in this particular section.
So guys, in the next lecture we are going to see what a JavaScript and how it looks like.
What are the payloads that we are going to use mostly in this particular section?