Unaprjeđenje web temeljenih rješenja primjenom radnog okvira BeEF

master's thesis

• Title (english): Improvement of web-based solutions using BeEF framework
• Author: Dominik Sever
• Mentor: Ivan Cvitić (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Siniša Husnjak (član povjerenstva)
• Committee member: Marko Periša (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2021-03-09, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Danas rijetko postoji osoba koja ne koristi računalo povezano na Internet u slobodno vrijeme ili na radnom mjestu. Internet olakšava mnoge svakodnevne zadatke, ali također nosi i opasnosti od kibernetičkih napada. XSS su jedna od najčešćih vrsta kibernetičkih napada te mogu imati velike posljedice za napadnutog korisnika. U ovom radu analizirani su XSS napadi kako bi se razumio način funkcioniranja ove vrste napada te kao temelj za simulaciju napada. Simulacija je izvedena pomoću BeEF radnog okvira. Rezultati simulacije su analizirani kako bi se dobio uvid u posljedice realnog napada. Na temelju sintetiziranih rezultata provedenog istraživanja pružene su smjernice zaštite od XSS napada unutar i izvan web preglednika.

Abstract (english)

Today, there is rarely a person who does not use a computer connected to the Internet in their free time or at workplace. The Internet makes many everyday tasks easier, but it also carries the dangers of cyber attacks. XSS are one of the most common types of cyber attacks and can have major consequences for the attacked user. In this paper, XSS attacks are analyzed in order to understand how this type of attack works and as a basis for attack simulation. The simulation was performed using the BeEF framework. The simulation results were analyzed to gain insight into the consequences of a real attack. Based on the synthesized results of the conducted research, guidelines for protection against XSS attacks inside and outside the web browser were provided.

• Keywords: kibernetički napad; XSS; BeEF; web stranica; kibernetička sigurnost
• Keywords (english): cyber attack; XSS; BeEF; web page; cyber security
• Language: croatian
• URN:NBN: urn:nbn:hr:119:973905
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2021-03-15 08:42:37