Like the name suggests,a Packet Sniffer can sniff network traffic travelling over the network and decode the content.The content might be anything from username and password to confidential emails.
CROSS SITE SCRIPTING ATTACKS
Cross Site Scripting, also known as an XSS attack, occurs when an application, url “get request”, or file packet is sent to the web browser window and bypassing the validation process. Once an XSS script is triggered, it’s deceptive property makes users believe that the compromised page of a specific website is legitimate.
They are a snippet of malicious code that can use your PC as a front for sending unsolicited advertisement emails or chat messages or even launch DoS attacks on remote servers and/or networks.
This attack technique consists of encoding user request parameters twice in hexadecimal format in order to bypass security controls or cause unexpected behavior from the application.It’s possible because the webserver accepts and processes client requests in many encoded forms.
Byusing double encoding it’s possible to bypass security filters that only decode user input once.The second decoding process is executed by the backend platform or modules that properly handle encoded data,but don’t have the corresponding security checks in place.