Txawm hais tias qhov kev tsim kho sai ntawm lub thev naus laus zis thev naus laus zis, network kev ruaj ntseg tseem yog ib qho tseem ceeb. Ib qho ntawm qhov muaj ntau tshaj yog XSS qhov tsis txaus ntseeg uas tso cai rau tus tawm tsam kom tau txais kev tswj hwm tiav tag nrho ntawm cov nyiaj tau ntawm Internet. Txhawm rau kom koj lub vev xaib muaj kev nyab xeeb, koj yuav tsum luam theej duab nws rau qhov tsis ruaj khov no.
Cov Lus Qhia
Kauj ruam 1
Qhov tseem ceeb ntawm XSS tiv thaiv qhov tsis zoo yog qhov ua tau los ntawm kev coj ua lub cim thib peb ntawm tus neeg rau zaub mov uas tso cai rau tus kws tshawb nyiag nyiag cov ntaub ntawv tsis pub lwm tus paub. Feem ntau, ncuav qab zib raug nyiag: los hloov lawv rau lawv tus kheej, tus neeg tua tuaj yeem nkag mus rau hauv thaj chaw nrog cov cai ntawm tus neeg uas nws cov ntaub ntawv nws nyiag. Yog tias qhov no yog tus thawj tswj hwm, ces tus kws tshawb fawb tseem yuav nkag mus rau cov xaib nrog cov cai tswj hwm.
Kauj ruam 2
XSS qhov tsis taus tau muab faib ua passive thiab nquag. Kev siv cov khoom nkag siab hais tias tsab ntawv tuaj yeem raug tua rau ntawm lub xaib, tab sis tsis tau txais kev cawm dim rau nws. Txhawm rau siv qhov tsis zoo xws li, ib tug nyiag nkas yuav tsum, nyob rau hauv ib nqe lus los yog lwm qhov, yuam koj nyem rau ntawm qhov txuas xa los ntawm nws. Piv txwv li, koj yog ib tus thawj coj xaib, tau txais cov lus qhia ntiag tug thiab ua raws li qhov txuas txuas hauv nws. Hauv qhov no, cov ncuav qab zib mus rau sniffer - qhov kev pab cuam cuam tshuam rau cov ntaub ntawv uas cov neeg nyiag yuav xav tau.
Kauj ruam 3
Active XSS muaj tsawg dua, tab sis muaj ntau yam txaus ntshai. Hauv qhov no, cov ntawv phem tau txais kev cawmdim rau ntawm lub vev xaib - piv txwv li, hauv kev sib tham lossis phau ntawv qhua. Yog tias koj tau sau npe rau hauv lub rooj sib tham thiab qhib qhov nplooj ntawv zoo li no, koj lub ncuav qab zib raug xa ncaj qha mus rau hauv lub hacker. Yog vim li cas nws thiaj li tseem ceeb heev uas koj yuav tsum tau kuaj xyuas koj lub xaib rau ntawm qhov chaw tsis ruaj khov.
Kauj ruam 4
Txhawm rau tshawb nrhiav passive XSS, txoj hlua "> kev ceeb toom () feem ntau yog siv, uas tau nkag mus rau hauv cov ntawv nkag teb chaws, feem ntau nyob hauv kev tshawb nrhiav ntawm lub xaib. Cov lus qhia muaj nyob hauv thawj cov cim hais tias: yog tias muaj qhov yuam kev hauv kev lim cov cim, cov cim kev ua cim tau pom tias kaw cov lus nug tshawb nrhiav, thiab cov ntawv sau tom qab nws tua Yog tias muaj qhov tsis zoo, koj yuav pom lub qhov rai pop-up ntawm qhov screen. Vaj li cas ntawm hom no muaj ntau heev.
Kauj ruam 5
Pom qhov ua tiav XSS pib los ntawm kev xyuas cov cim npe twg tso cai rau ntawm lub xaib. Rau qhov hacker, qhov tseem ceeb tshaj plaws yog cov img thiab url tags. Piv txwv li, sim ntxig qhov txuas rau daim duab hauv cov lus zoo li no:
Kauj Ruam 6
Yog tias tus ntoo khaub lig rov tshwm sim dua, tus kws nyiag ua li cas rau ib nrab. Tam sim no nws ntxiv ib qho ntxiv rau tom qab * *.
Kauj Ruam 7
Yuav ua li cas tiv thaiv lub xaib los ntawm kev tawm tsam los ntawm XSS cov kev tsis raug? Sim khaws nws li ob peb daim teb rau cov ntaub ntawv nkag teb chaws li sai tau. Ntxiv mus, txawm tias cov xov tooj cua khawm, khij hauv lub xov tooj, thiab lwm yam tuaj yeem dhau los ua "teb". Muaj cov hacker siv tshwj xeeb uas qhia txhua thaj chaw uas tau zais ntawm nplooj browser. Piv txwv IE_XSS_Kit rau Internet Explorer. Nrhiav cov nqi hluav taws xob no, nruab nws - nws yuav muab ntxiv rau browser browser menu. Tom qab ntawd, khij txhua qhov ntawm koj lub xaib kom muaj kev cuam tshuam raug.
