๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ

XSS1

[Dreamhack] ClientSide : Cross Site Scripting (XSS) + Stored XSS + Reflected XSS 2 - 0 - 1. ClientSide : Cross Site Scripting (XSS) + Stored XSS + Reflected XSS # Cross Site Scripting (XSS) ( = ํด๋ผ์ด์–ธํŠธ ์‚ฌ์ด๋“œ ์ทจ์•ฝ์  ) : ๊ณต๊ฒฉ์ž๊ฐ€ ์›น ๋ฆฌ์†Œ์Šค์— ์•…์„ฑ ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์‚ฝ์ž…ํ•˜์—ฌ ํด๋ผ์ด์–ธํŠธ์˜ ์›น ๋ธŒ๋ผ์šฐ์ €์—์„œ ํ•ด๋‹น ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์‹คํ–‰ํ•˜๋Š” ์ทจ์•ฝ์ ์„ ๋งํ•˜๋ฉฐ, ์ด์šฉ์ž๊ฐ€ ์‚ฝ์ž…ํ•œ ๋‚ด์šฉ์„ ์ถœ๋ ฅํ•˜๋Š” ๊ธฐ๋Šฅ์—์„œ ๋ฐœ์ƒํ•จ + Cross Site Scripting ์˜ ๊ฒฝ์šฐ CSS (์Šคํƒ€์ผ์‹œํŠธ)์™€์˜ ํ˜ผ๋™ ๊ฐ€๋Šฅ์„ฑ์ด ์žˆ์–ด CSS๊ฐ€ ์•„๋‹Œ XSS๋กœ ๋ช…๋ช…ํ•จ - XSS ์˜ ์ข…๋ฅ˜ Stored XSS Reflected XSS DOM-based XSS Universal XSS ์‚ฌ์šฉ๋˜๋Š” ์•…์„ฑ ์Šคํฌ๋ฆฝํŠธ๊ฐ€ ์„œ๋ฒ„์— ์ €์žฅ๋˜๊ณ , ์„œ๋ฒ„์˜ ์‘๋‹ต์— ๋‹ด๊ฒจ์˜ค๋Š” XSS.. 2022. 9. 21.

ํ‹ฐ์Šคํ† ๋ฆฌํˆด๋ฐ”