Scribd Logo
Upload

Welcome to Scribd!

  • 019 HTML Injection Basics

    Uploaded by

    lạc hoa
    16 views6 pages
    This document discusses web application penetration testing and HTML injection basics. It describes how HTML injection works by inserting malicious HTML input that is not sanitized into a web page. The attacker can then control how the page is rendered for the victim. It also briefly mentions other injection attacks like JavaScript injection and SQL injection. The document is presented by Vivek Ramachandran from SecurityTube and promotes his training resources at SecurityTube and Pentester Academy.

    Original Description:

    Original Title

    019-html-injection-basics

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses web application penetration testing and HTML injection basics. It describes how HTML injection works by inserting malicious HTML input that is not sanitized into a web page. The attacker can then control how the page is rendered for the victim. It also briefly mentions other injection attacks like JavaScript injection and SQL injection. The document is presented by Vivek Ramachandran from SecurityTube and promotes his training resources at SecurityTube and Pentester Academy.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    16 views6 pages

    019 HTML Injection Basics

    Uploaded by

    lạc hoa
    This document discusses web application penetration testing and HTML injection basics. It describes how HTML injection works by inserting malicious HTML input that is not sanitized into a web page. The attacker can then control how the page is rendered for the victim. It also briefly mentions other injection attacks like JavaScript injection and SQL injection. The document is presented by Vivek Ramachandran from SecurityTube and promotes his training resources at SecurityTube and Pentester Academy.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 6

    Web

     Applica+on  Pentes+ng  

    Vivek  Ramachandran  
    SWSE,  SMFE,  SPSE,  SISE,  SLAE,  SGDE  Course  Instructor  

    Cer+fica+ons:                          hGp://www.securitytube-­‐training.com    
     
    Pentester  Academy:    hGp://www.PentesterAcademy.com    

    ©SecurityTube.net  
    HTML  Injec+on  Basics  

    ©SecurityTube.net  
    Injec+on  AGacks  

    •  Frontend  (Client)  
    –  Rendering  AGacks  =>  HTML  Injec+on  
    –  Code  Execu+on  =>  JS  Injec+on  (XSS)  

    •  Backend  (Server)  
    –  Command  Injec+on  
    •  SQL  Injec+on  etc.  

    ©SecurityTube.net  
    HTML  Injec+on  

    •  User  input  not  sani+zed  

    •  Malicious  input  consists  of  HTML  injected  into  


    page  

    •  Render  page  as  per  aGacker’s  choice  to  vic+m  


     

    ©SecurityTube.net  
    Injec+on  in  Content  

    ©SecurityTube.net  
    Pentester  Academy  

    ©SecurityTube.net  

    You might also like