So, guys, in the sort lecture, we are going to discuss what is a script and what are the we can say
payloads that we will be using in this section or in our upcoming life of hacking.
So to make things clear of JavaScript is different from the Java programming language.
So Netscape name JavaScript purely for marketing reasons.
So as the Java programming language was gaining popularity during that time, and so in dynamic of application,
JavaScript is used for right live.
We can see a wide variety of tasks and can be embedded.
We can see in the editorial pages to retrieve data from the several sources to build the Web page.
So a simple example would be a social networking websites using JavaScript to build a profile page by
loading the profile image, user details and all post for several locations.
So some of these in JavaScript is used in code.
Now let's see them.
So the first one is a script.
OK, so the first one is a script that.
So let me first change the color.
So I have to use this color.
So first all, we are having a script, OK, so OK, so this is our payload, as you can see this as
our payload.
So as you can see that the script.
So what it is doing here.
So JavaScript can be embedded directly in the web using a script that so as you can see this thing.
So when our discussion will execute, it will simply pop up a box like this.
OK, a box like this, which is simply alerting the user died X, X, X, be whatever written inside
these double code, it will reflect on this particular dialogue.
So this is the this is why we use Java script and then later we are having body type.
So this script can also be embedded using the OnLoad event in the body type.
OK.
So this will simply alert you if you this the payload is starting from here.
So it was simply it will do the same work like a script and then we are having image.
So this is nothing but this that can be used to execute a JavaScript and which is often used for malicious
purposes.
So we are going to see all of them, don't we.
OK, I saw there are some other tags such as iFrame and Divide and Link are also used to embed scripting
e-mail page.
So JavaScript can be used to not only retrieve information from the web server, but also to perform
the DOM we can save document object model, which is called Dom script, and it has it has access to
web browser data and operating system properties.
So JavaScript was actually designed to run in a very restricted environment with limited access to the
underlying operating system.
But even with the limitation, limited access, as we can see, limited access, a JavaScript loaded
in the Web browser can be used to do some nasty stuff.
So in JavaScript is loaded in a Web browser so it can access the cookies assigned to the user HACEN
and access the usual history.
So cookies are often used as a section identifiers.
If the attacker can steal them, they can gain control over the situation, also, JavaScript can has
the access to the entire dome of the webpage and can modify the e-mail page, which which simply can
lead to a defacing of the webpage.
So this is how JavaScript works in case of excesses in the next lecture.
We are going to see some more about some more things about Java so we can see across at the scripting.