OWASP TOP 10 - GenTiL Cybersecurity

Showing posts with label OWASP TOP 10. Show all posts

اشهر هجمات (XSS) Cross site scripting

اشهر هجمات (XSS) Cross site scripting

27 May 2024 (0)

اشهر هجمات (XSS) Cross site scripting تعريف لـ (XSS) ثغرة Cross-Site Scripting (XSS) هي ثغرة أمنية تحدث عندما يتمكن المهاجم من تضمين سكريبتات خبيثة (من جافا سكريبت مثلاً) داخل صفحة ويب مرسلة إلى متصفح المستخدم النهائي. هذا يسمح للمهاجم …

window['__wavt'] = 'AOuZoY7m-i79zGO63WGFESyuNS8Br4WHoQ:1737533379935';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d2970989918755043111','//gentilsecurity.blogspot.com/search/label/OWASP%20TOP%2010?hl\x3den','2970989918755043111'); _WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '2970989918755043111', 'title': 'GenTiL Cybersecurity', 'url': 'https://gentilsecurity.blogspot.com/search/label/OWASP%20TOP%2010?hl\x3den', 'canonicalUrl': 'https://gentilsecurity.blogspot.com/search/label/OWASP%20TOP%2010', 'homepageUrl': 'https://gentilsecurity.blogspot.com/?hl\x3den', 'searchUrl': 'https://gentilsecurity.blogspot.com/search', 'canonicalHomepageUrl': 'https://gentilsecurity.blogspot.com/', 'blogspotFaviconUrl': 'https://gentilsecurity.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22GenTiL Cybersecurity - Atom\x22 href\x3d\x22https://gentilsecurity.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22GenTiL Cybersecurity - RSS\x22 href\x3d\x22https://gentilsecurity.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22GenTiL Cybersecurity - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/2970989918755043111/posts/default\x22 /\x3e\n', 'meTag': '\x3clink rel\x3d\x22me\x22 href\x3d\x22https://www.blogger.com/profile/14757094126955035563\x22 /\x3e\n', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/c8f12f73e8f3b106', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Share to X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'index', 'searchLabel': 'OWASP TOP 10', 'pageName': 'OWASP TOP 10', 'pageTitle': 'GenTiL Cybersecurity: OWASP TOP 10', 'metaDescription': 'GenTiL Cybersecurity \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0645\u062a\u062e\u0635\u0635\u0629 \u0641\u064a \u062a\u0642\u062f\u064a\u0645 \u0627\u0644\u0634\u0631\u0648\u062d\u0627\u062a \u0641\u064a \u0645\u062c\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a.'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'GenTiL Cybersecurity', 'description': 'GenTiL Cybersecurity \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0645\u062a\u062e\u0635\u0635\u0629 \u0641\u064a \u062a\u0642\u062f\u064a\u0645 \u0627\u0644\u0634\u0631\u0648\u062d\u0627\u062a \u0641\u064a \u0645\u062c\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a.', 'url': 'https://gentilsecurity.blogspot.com/search/label/OWASP%20TOP%2010?hl\x3den', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': false, 'isArchive': false, 'isSearch': true, 'isLabelSearch': true, 'search': {'label': 'OWASP TOP 10', 'resultsMessage': 'Showing posts with the label OWASP TOP 10', 'resultsMessageHtml': 'Showing posts with the label \x3cspan class\x3d\x27search-label\x27\x3eOWASP TOP 10\x3c/span\x3e'}}}, {'name': 'widgets', 'data': [{'title': 'BlogArchive', 'type': 'BlogArchive', 'sectionId': 'TemplateInsert', 'id': 'BlogArchive300'}, {'title': 'BlogLabels', 'type': 'Label', 'sectionId': 'TemplateInsert', 'id': 'Label300'}, {'title': '\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0627\u0644\u0642\u0627\u0644\u0628', 'type': 'LinkList', 'sectionId': 'TemplateInsert', 'id': 'LinkList300'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'type': 'PageList', 'sectionId': 'pages', 'id': 'PageList301'}, {'title': '\u0645\u0631\u0628\u0639 \u0627\u0644\u0628\u062d\u062b', 'type': 'HTML', 'sectionId': 'pages', 'id': 'HTML301'}, {'title': '\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u062a\u0648\u0627\u0635\u0644 \u0627\u0644\u0625\u062c\u062a\u0645\u0627\u0639\u064a', 'type': 'LinkList', 'sectionId': 'pages', 'id': 'LinkList301'}, {'title': 'GenTiL Cybersecurity (Header)', 'type': 'Header', 'sectionId': 'head-container', 'id': 'Header1'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629', 'type': 'LinkList', 'sectionId': 'menu-bar', 'id': 'LinkList302'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'RecentPosts', 'id': 'Blog1', 'posts': [{'id': '883334894631811260', 'title': '\u0627\u0634\u0647\u0631 \u0647\u062c\u0645\u0627\u062a (XSS) Cross site scripting', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9h5b47n0-I3BISg6GP6PeL2KufCxIhbYrA5bTkEcM0_hDnObbmOs17PNtp5KLcIg8c9qXbn9Exbg6nWE-PdmhDT79Q4I63oNiTHwt6wGU_dasSe8SDA5HFfiPRJ2uL8H-DGhyphenhyphenYuY6oad3D7uVNdRMIBTWtDtEjAjJxXYDJHEZ2zWiW7e2p1-R52pJIoA/w400-h250/%D8%A7%D8%B4%D9%87%D8%B1%20%D9%87%D8%AC%D9%85%D8%A7%D8%AA%20(XSS)%20Cross%20site%20scripting.png', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'author', 'label': '\u0628\u0648\u0627\u0633\u0637\u0629'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'author', 'label': '\u0628\u0648\u0627\u0633\u0637\u0629'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}, {'name': 'labels', 'label': ''}]}, {'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'type': 'ContactForm', 'sectionId': 'RecentPosts', 'id': 'ContactForm302'}, {'title': '\u0639\u062f\u0627\u062f \u0627\u0644\u062a\u0648\u0627\u0635\u0644 \u0627\u0644\u0625\u062c\u062a\u0645\u0627\u0639\u064a [SM]', 'type': 'LinkList', 'sectionId': 'sidebar-section', 'id': 'LinkList3'}, {'title': '\u0627\u0644\u0634\u0627\u0626\u0639', 'type': 'PopularPosts', 'sectionId': 'sidebar-section', 'id': 'PopularPosts1', 'posts': [{'title': '\u0634\u0631\u062d paramspider \u0648\u062d\u0644 \u0645\u0634\u0627\u0643\u0644 \u0627\u0644\u062a\u062b\u0628\u064a\u062a | bug bounty 2024', 'id': 655199826105689211}, {'title': '\u0627\u0634\u0647\u0631 \u0647\u062c\u0645\u0627\u062a (XSS) Cross site scripting', 'id': 883334894631811260}]}, {'title': '\u0630\u0627\u062a \u0635\u0644\u0629', 'type': 'Label', 'sectionId': 'sidebar-section', 'id': 'Label1'}, {'title': '\u0634\u0627\u0647\u062f \u0623\u064a\u0636\u0622', 'type': 'PopularPosts', 'sectionId': 'footer-top-section', 'id': 'PopularPosts2', 'posts': [{'title': '\u0634\u0631\u062d paramspider \u0648\u062d\u0644 \u0645\u0634\u0627\u0643\u0644 \u0627\u0644\u062a\u062b\u0628\u064a\u062a | bug bounty 2024', 'id': 655199826105689211}, {'title': '\u0627\u0634\u0647\u0631 \u0647\u062c\u0645\u0627\u062a (XSS) Cross site scripting', 'id': 883334894631811260}]}, {'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'type': 'ContactForm', 'sectionId': 'col-2', 'id': 'ContactForm1'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'type': 'PageList', 'sectionId': 'col-4', 'id': 'PageList1'}, {'title': '\u0627\u0644\u062d\u0642\u0648\u0642', 'type': 'HTML', 'sectionId': 'license', 'id': 'HTML306'}]}]); _WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive300', 'TemplateInsert', document.getElementById('BlogArchive300'), {'languageDirection': 'ltr', 'loadingMessage': 'Loading\x26hellip;'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label300', 'TemplateInsert', document.getElementById('Label300'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList300', 'TemplateInsert', document.getElementById('LinkList300'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList301', 'pages', document.getElementById('PageList301'), {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'links': [{'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com', 'title': '\u0627\u0644\u0635\u0641\u062d\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page.html?hl\x3den', 'id': '3639597355939357566', 'title': '\u0623\u062a\u0635\u0644 \u0628\u0646\u0627'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page_84.html?hl\x3den', 'id': '2888151863185689090', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u0623\u0633\u062a\u062e\u062f\u0627\u0645'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page_22.html?hl\x3den', 'id': '438330849138406648', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML301', 'pages', document.getElementById('HTML301'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList301', 'pages', document.getElementById('LinkList301'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'head-container', document.getElementById('Header1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList302', 'menu-bar', document.getElementById('LinkList302'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'RecentPosts', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'navMessage': 'Showing posts with label \x3cb\x3eOWASP TOP 10\x3c/b\x3e. \x3ca href\x3d\x22https://gentilsecurity.blogspot.com/\x22\x3eShow all posts\x3c/a\x3e', 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2015241814-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm302', 'RecentPosts', document.getElementById('ContactForm302'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'blogId': '2970989918755043111', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY7TIVUfkTSuDpFAXkkSRcQa7SwM8Q:1737533379936', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList3', 'sidebar-section', document.getElementById('LinkList3'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'sidebar-section', document.getElementById('PopularPosts1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'sidebar-section', document.getElementById('Label1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts2', 'footer-top-section', document.getElementById('PopularPosts2'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'col-2', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'blogId': '2970989918755043111', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY7TIVUfkTSuDpFAXkkSRcQa7SwM8Q:1737533379936', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'col-4', document.getElementById('PageList1'), {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'links': [{'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/', 'id': '0', 'title': '\u0627\u0644\u0635\u0641\u062d\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page_84.html?hl\x3den', 'id': '2888151863185689090', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u0623\u0633\u062a\u062e\u062f\u0627\u0645'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page_22.html?hl\x3den', 'id': '438330849138406648', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629'}, {'isCurrentPage': false, 'href': 'https://gentilsecurity.blogspot.com/p/blog-page.html?hl\x3den', 'id': '3639597355939357566', 'title': '\u0623\u062a\u0635\u0644 \u0628\u0646\u0627'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML306', 'license', document.getElementById('HTML306'), {}, 'displayModeFull'));