MinorProject/index.html at main · Aayu1014/MinorProject · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>INJI-SOL</title>
    <link rel="stylesheet" href="index.css">
</head>
<body>
    <div id="wrapper">
        <div class ="container">
            <img src="imagestack/sql (1).jpg" class="background">
            <h1>INJI-SOL</h1>
        </div>
        <section>
            <h2 class="secondaryheading"> SQL Injection</h2>
            <p class="text">
                SQL injection is a technique used to extract user data by injecting web page inputs as statements through SQL commands. Basically, malicious users can use these instructions to manipulate the application’s web server.
                <br><br>
                &#x2022; SQL injection is a code injection technique that can compromise your database.
               <br>
                &#x2022; It is one of the most common web hacking techniques.
               <br>
                &#x2022; It is the injection of malicious code into SQL statements via web page input.
               <br><br>
                         SQL Injection is the main source of web application critical vulnerabilities found globally in 2023, with 23 percent, in addition to 19 percent of internet facing critical vulnerabilities due to cross site scripting (stored) attacks.

            </p>
            <div class="bg bg1">
                <h2 class="desc"> SCOPE OF WEBSITE</h2>

            </div>
            <p class="text">
                Creating a website focused on the prevention of SQL injection and cross-site scripting (XSS) is a valuable and necessary initiative in the realm of web security. Both SQL injection and XSS are common and critical security vulnerabilities that can lead to unauthorized access, data breaches, and various other malicious activities.
                <br>
                Here's an overview of the scope and key aspects we will be considering :
                <br><br>
                &#x2022; <b>Educational Content:</b>
                <br>
                               Provide detailed information about SQL injection and XSS, explaining how these attacks work and the potential risks they pose.
                <br><br>
                &#x2022; <b>Testing and Assessment:</b>
                <br>
                               Offer guidelines for conducting security assessments and penetration testing to identify and remediate vulnerabilities.
                <br><br>
                &#x2022; <b>Prevention Techniques:</b>
                <br>
                               Outline best practices for preventing SQL injection and XSS in web development.
                               Cover parameterized queries, prepared statements, input validation, and output encoding as effective measures against these vulnerabilities.
                <br><br>
                &#x2022; <b>Security Tools:</b>
                <br>
                               Recommend and explain the use of security tools and scanners that can help identify vulnerabilities in web applications.
                               include information on web application firewalls (WAFs) and how they can mitigate SQL injection and XSS attacks.


            </p>
            <div class="bg bg2">
                <h2 class="desc"> TECHNOLOGY </h2>

            </div>
            <p class="text">
               <b>TECHNOLOGIES USED IN OUR PROJECT:</b>
               <br><br>
                    Html, Css, Javascript.
                    Express Js, MongoDB.
                <br><br>
                <b>TECHNIQUES TO PREVENT SQL INJECTION</b>
                <br><br>
                &#x2022; <b>Knuth Morris And Pratt Algorithm</b>  - KMP string matching algorithm is used to compare user;s input string with different SQL injection and XSS attacks patterns that have been formulated.
                <br><br>
                &#x2022; <b>Honey Potting</b>- Mechanism set up to detect, deflect, or study attempts at unauthorized use of information systems. It is essentially a trap designed to attract and identify attackers or malicious activity.
                <br><br>
                &#x2022; <b>JS Validation </b> -  Checking user inputs on a website using JavaScript code to ensure that they meet certain criteria or constraints before being submitted to the server.

            </p>
            <div class="bg bg3">
                <a href="indexform.html"><h2 class="desc"> PROTOTYPE </h2></a>


            </div>
            <p class="text">
                INJI-SOL is basically a prototype where we can check various SQL queries which are used for sql injection to access confidential data.
                Here is the  link


            </p>
            <div class="button-section">
                <a href="indexform.html" class="custom-button">Click me</a>
            </div>


        </section>
    </div>


</body>
</html>