Welcome to this selector in these select so we'll see about the open you all read Erickson.
So first of all what is your role rededication.
So you are a lead addict is a web server fun sun so it can be any keywords like you can see the redirect.
You wards are basically WARD Our Lord cured.
That will send a user from one you at all to another.
So user will think that there is this going for the legit website but instead they will be redirect
to another glowing Web site or a malicious Web site.
So read addicts commonly take the form of a automated route idea that uses one or a series of instead
status score defined within the city protocol.
So speaking of the other lead ERICKSON We need to see that some of their city protocol has some cause.
Or is it because is status scored at as to it.
So there are several types of free data that is available to the web developers including manual redirects
its GDP 3 6 cities is status scored.
So this is very important.
We also see about these three 300 one three hundred two and three hundred three cities instead of scored
to see if you had read Erickson is possible in particular barometer or not because we are in the boundary
of the excesses.
So first of all we'll see how that barometer is wonderful or not.
So first of all we'll see if we access this attack is possible on this Web site or not.
If this barometer or if that barometer which is reflecting back anything we just pass in that barometer
then there is obviously the this attack because in the case of the excesses attack there is a reflected
excesses attack is any input that is given to the barometer is reflected there will be the excesses
attack.
And in this case if there is a excesses the attack will test for the U.S. military tactics and to those
barometer using the intruder of the barbed suit.
So we have to take care of these instead of scored which starts with three execs.
So we'll see all about that in the upcoming lecture about the U.S. are forwarding domain redirection
Domain Forwarding so you can see the open road derricks and attack processes right here.
So this upper part is basically a successful log into the trust side so user will click a link to a
trusted site over here and there is a SSL encryption going over here.
So it is there trust your site and user will log into the site successfully.
But if there is three hundred one dude and then the user will receive the redirect and user will be
redirected to the malicious site they ought to be going to the cross their site instead they will be
related to the malicious site and this is the MLSE site so user can input anything in this malicious
site and hacker can assist that information of the user from this Melissa a site so read Erickson can
be also powerful attack in the case of these excesses attack so first of all we'll see how this open
read Eric's and work in the real Web site and we'll see how it intruder works with a different payload
that can be injected in the UL to redirect from this lady to Web site to the malicious site of the hacker
so we'll see all about that in this upcoming lecture.
See you in the next one.