Tier-1-Club · toanngocdev · Dec 26, 2024 · Jan 3, 2025 · Feb 2, 2025
diff --git a/content/docs/techniques/web/security/click-hijacking.mdx b/content/docs/techniques/web/security/click-hijacking.mdx
@@ -0,0 +1,9 @@
+---
+title: Click Hijacking
+description: Display file structure in your documentation
+preview: "Click Hijacking"
+---
+
+## Usage
+
+Wrap file components in `Click Hijacking`.
diff --git a/content/docs/techniques/web/security/csrf.mdx b/content/docs/techniques/web/security/csrf.mdx
@@ -0,0 +1,134 @@
+---
+title: Cross-site Request Forgery (CSRF)
+description: Understand CSRF attack and how to prevent it.
+preview: "CSRF"
+---
+
+## What is CSRF ?
+
+<b>CSRF</b> is a type of web vulnerability that allows the attackers to trick user into performing
+unwanted actions on a web application where they are authenticated.
+
+The attackers can create links that resemble familiar applications, such as "faceebook.com" which kinda famillar to "facebook.com".
+Clicking on these links can unknowingly send requests to the Facebook server, potentially leading to unwanted consequences for your account.
+
+## How does CSRF work ?
+
+![image](/images/javascript/security/csrf-hacking-facebook.png)
+
+For example, you have an API that lets the user change password on their account. When a user performs this action, they will make an HTTP request as shown:
+
+```
+POST /update-password HTTP/1.1
+Host: facebook.com
+Content-Type: application/x-www-form-urlencoded
+Content-Length: 30
+Cookie: session=someRandomSessionToken
+password=istoleyourpassword
+```
+
+With the information shown, the attacker can create a web page for example "faceebook.com" containing the following HTML:
+
+```
+<html>
+    <body>
+        <form action="https://facebook.com/update-password" method="POST">
+            <input type="hidden" name="email" value="istoleyourpassword" />
+        </form>
+        <script>
+            document.forms[0].submit();
+        </script>
+    </body>
+</html>
+```
+
+If the user visits the above web page, the action will automatically be trigger and if the user is logged in to the website, in the example is "facebook.com",
+their browser will include their session cookie in the request. And the target website, which is "facebook.com" will treat the request as having been made by the victim user
+and change their password
+
+## How dangerous are CSRF attacks ?
+
+<b>Transferring funds or Making purchases:</b>
+Attackers could initiate unauthorized money transfers from your bank account or make purchases on.
+your behalf from online stores.
+
+![image](/images/javascript/security/csrf-hacking-bank.png)
+
+There are other viable attacks, not all of them, but you can see them as examples.
+
+<b>Posting unwanted content:</b>
+Attackers could post messages or content on your social media accounts or other online platforms.
+
+<b>Modifying sensitive data:</b>
+Attackers could change your account settings, passwords or other personal information.
+
+The cost can be significant depends on the attackers skills.
+
+## How to property prevent CSRF attacks ?
+
+There are severals methods to prevent <b>CSRF</b> attacks:
+
+<b>Use Anti-CSRF Tokens:</b>
+This is the most common and effective method to prevent a <b>CSRF</b> attack. Each form submission
+includes a unique, unpredictable token that the server verifies. When a CSRF token is generated it
+should be stored server-side within the user's session data. When a subsequent request is received
+that requires validation, the server-side application should verify that the request includes a
+token which matches the value that was stored in the user's session.
+
+In the form on client-side should have a hidden field that holds the value of the token that generated on server-side:
+
+```
+<input type="hidden" name="csrf-token" value="aTokenThatGeneratedOnServer" />
+```
+
+![image](/images/javascript/security/csrf-anti-token.png)
+
+<b>SameSite Cookie Attribute:</b>
+This attribute helps the browser decide whether to send cookies along with cross-site requests. The
+values of this attribute are `Lax`, `Strict` or `None`. The `Strict` value will prevent the cookie
+from being sent by the browser to the target site in all cross-site browsing context, even when
+following a regular link. This attribute should not replace a CSRF Token. It should co-exist with
+the token to protect the user like a second layer of defense.
+
+![image](/images/javascript/security/csrf-samesite.png)
+
+<b>Check the Origin and Referrer Headers:</b>
+You need to determine the origin that request is going to/coming from. On server, you need to verify
+if both of them match. If they do, so you can accept the request as ligitimate and if they don't,
+you can discard the request
+
+You can try to add a referer as a header when you send any request
+
+```
+GET /images/secure-image.png HTTP/1.1
+Host: example.com
+Referer: https://example.com/protected-page
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
+Accept: image/png,image/*;q=0.8
+```
+
+And on the server you can simply verify the referer with this simple code ( this example using expressjs ).
+
+```
+app.get('/images/:filename', (req, res) => {
+    const referer = req.get('Referer');
+    const allowedOrigin = 'https://example.com';
+
+    if (!referer || !referer.startsWith(allowedOrigin)) {
+        return res.status(403).send('Forbidden: Invalid referer');
+    }
+
+    res.sendFile(`/path/to/images/${req.params.filename}`);
+});
+```
+
+## If you want to dive deeper on CSRF
+
+<b>References:</b> I gathered information for this document about CSRF on these awesome websites
+
+[OWASP](https://owasp.org/www-community/attacks/csrf) - OWASP offical site is a really reliable
+source about security. They have documents about not only <b>CSRF</b>, there have also alot of
+documents related to web security in general.
+
+[Cloudflare](https://developers.cloudflare.com/waf/troubleshooting/samesite-cookie-interaction/) -
+Another reliable source about security.
diff --git a/content/docs/techniques/web/security/dos-ddos.mdx b/content/docs/techniques/web/security/dos-ddos.mdx
@@ -0,0 +1,9 @@
+---
+title: Denial-of-service & Distributed Denial-of-service (DOS & DDOS)
+description: Understand DOS/DDOS and how to prevent it.
+preview: "DOS & DDOS"
+---
+
+## Usage
+
+Wrap file components in `DOS & DDOS`.
diff --git a/public/images/javascript/security/csrf-anti-token.png b/public/images/javascript/security/csrf-anti-token.png
diff --git a/public/images/javascript/security/csrf-hacking-bank.png b/public/images/javascript/security/csrf-hacking-bank.png
diff --git a/public/images/javascript/security/csrf-hacking-facebook.png b/public/images/javascript/security/csrf-hacking-facebook.png
diff --git a/public/images/javascript/security/csrf-samesite.png b/public/images/javascript/security/csrf-samesite.png