Yuav ua li cas yog txhaj tshuaj ntawm SQL?

Tus xov tooj ntawm qhov chaw thiab cov nplooj ntawv nyob rau hauv lub web yog loj hlob tsis tshee. Noj rau txoj kev loj hlob ntawm tag nrho cov neeg uas ua tau. Thiab novice Web developers feem ntau siv tsis zoo thiab qub code. Thiab nws tsim ib tug ntau ntawm loopholes rau criminals thiab hackers. Tshaj lawv yog. Ib qho ntawm feem classic vulnerabilities - SQL-txhaj tshuaj.

Ib me ntsis ntawm kev tshawb xav

Muaj coob tus neeg paub hais tias feem ntau ntawm qhov chaw thiab cov kev pab cuam nyob rau hauv lub network siv cov SQL database cia. Qhov no yog ib tug xyaum cov lus nug lus hais tias tso cai rau koj los tswj thiab tswj lub cia ntawm cov ntaub ntawv. Muaj ntau ntau txawv versions ntawm lub database system tswj database - Oracle, MySQL, Postgre. Tsis hais txog ntawm lub npe thiab hom, lawv siv tib cov lus nug cov ntaub ntawv. Nws yog ntawm no uas yog lus dag lub peev xwm ruaj khov. Yog hais tias tus tsim tawm ua tsis tau tejyam lis kom zoo thiab securely thov, ib tug attacker yuav coj kom zoo dua qhov no thiab siv tshwj xeeb tactics mus nce nkag tau mus rau lub database, thiab ces - thiab rau tag nrho cov qhov chaw tswj.

Kom tsis txhob rau tej lub sijhawm, koj yuav tsum kom zoo zoo optimize cov code thiab zoo saib xyuas nyob rau hauv ib yam nyob rau hauv uas ib tug kev thov yog ua lawm.

Kos rau SQL-txhaj

Yuav kom tsim muaj cov kev ruaj khov nyob rau hauv lub network muaj ib tug luj ntawm tas cia li software systems. Tab sis nws yog tau mus nqa tawm ib tug yooj yim tshev manually. Ua li no, mus rau ib qho ntawm cov kev xeem qhov chaw thiab nyob rau hauv qhov chaw nyob bar mus sim ua ib tug database kev ua yuam kev. Piv txwv li, ib tsab ntawv rau ntawm qhov chaw yuav tsis tau leg lub thov thiab tsis luas lawv.

Piv txwv li, muaj nekiy_sayt / index.php? Id = 25

Qhov yooj yim txoj kev - muab tso rau 25 tom qab lub quote thiab xa daim ntawv thov. Yog hais tias tsis muaj kev ua yuam kev tshwm sim, ua nyob rau hauv qhov chaw thiab lim tag nrho cov kev thov yog leej twg kom raug, los yog neeg xiam nyob rau hauv lub chaw ntawm lawv cov zis. Yog hais tias ib daim ntawv yog reloaded nrog cov teeb meem, ces tus yooj yim SQL-txhaj yog.

Tom qab nws pom, koj yuav tau sim kom tau tshem ntawm nws.

Yuav kom siv no kom txhob raug yuav tsum tau paub ib tug me ntsis txog SQL-queries pawg. Ib tug ntawm lawv - UNION. Nws theem ua ke ob peb lus nug tau rau ib tug. Yog li ntawd peb yuav tau xam tus naj npawb ntawm teb nyob rau hauv lub rooj. QAUV thawj cov lus nug yog:

• nekiy_sayt / index.php? id = 25 UNION qho 1.

Nyob rau hauv Feem ntau, qhov no cov ntaub ntawv yuav tsum ua kom muaj ib qho yuam kev. Qhov no txhais tau tias cov xov tooj ntawm cov teb yog tsis sib npaug zos rau 1. Yog li, xaiv cov kev xaiv uas ntawm 1 los yog ntau dua, nws tseem tau mus nrhiav kom tau lawv cov caij nyoog tooj:

• nekiy_sayt / index.php? id = 25 UNION qho 1,2,3,4,5,6.

Hais tias yog, thaum cov kev ua yuam kev yuav tsis muaj lawm yuav tshwm sim, nws txhais tau tias tus xov tooj ntawm teb kwv yees.

Muaj kuj yog ib qho lwm txoj kev daws mus rau qhov teeb meem no. Piv txwv li, thaum ib tug loj tus naj npawb ntawm teb - 30, 60 los sis 100. Qhov no hais kom ua GROUP LOS. Nws pawg kev soj ntsuam ntawm ib cov lus nug nyob rau hauv tej thaj av, piv txwv li id:

• nekiy_sayt / index.php? id = 25 GROUP LOS NTAWM 5.

Yog hais tias qhov yuam kev tau tsis tau txais, ces lub teb ntau tshaj 5. Yog li, hloov kev xaiv los ntawm ib tug ncaj ntau yam, nws tseem tau mus xam ntau npaum li cas ntawm lawv ua tau.

Qhov kev piv txwv SQL-txhaj - rau beginners uas xav mus sim lawv tus kheej nyob rau hauv lub xeem ntawm nws qhov chaw. Nws yog ib qho tseem ceeb yuav tau nco ntsoov hais tias rau tso cai nkag mus rau lwm lub muaj tsab xov xwm ntawm lub txim txhaum Code.

Lub ntsiab yam ntawm kev txhaj tshuaj

Siv kev ruaj khov los ntawm SQL-txhaj nyob rau hauv ob peb embodiments. Tom ntej no yog cov feem ntau nrov txoj kev:

• Lub UNION cov lus nug lub SQL txhaj tshuaj. Ib tug yooj yim piv txwv ntawm no hom lawm twb tau soj ntsuam saum toj no. Nws yog pom tau hais vim ib qho yuam kev nyob rau hauv kev kuaj khoom cov ntaub ntawv, uas yog tsis lim.

• Yuam kev-raws li SQL txhaj tshuaj. Raws li lub npe paub licas hais, hom kuj siv ib qho yuam kev, xa cov kab zauv muaj syntactically tsis yog. Ces muaj cov interception ntawm lub teb headers, xav txog uas yuav tsum tau nqa tawm tom qab SQL-txhaj tshuaj.

• Stacked queries lub SQL txhaj tshuaj. Qhov no tsis ruaj yog txiav txim los ntawm kev ua successive thov. Nws yog tsiag ntawv los ntawm tas li ntawd nyob rau thaum xaus ntawm lub kos npe rau ";". Qhov no mus kom ze yog feem ntau siv mus saib tau rau qhov kev siv ntawm kev nyeem ntawv thiab sau ntawv cov ntaub ntawv los yog kev khiav hauj lwm qhov system zog, yog tias tsim nyog cia nws.

Software rau searching SQL-vulnerabilities

Puas muaj rau SQL-txhaj tshuaj, qhov kev pab cuam feem ntau muaj ob lub Cheebtsam - ib qhov chaw luam theej duab rau tau vulnerabilities thiab siv lawv mus nce nkag tau mus rau cov ntaub ntawv. Muaj ib co cuab yeej rau yuav luag tag nrho cov paub platforms. Lawv functionality heev tswj xyuas lub website rau keej koj SQL-txhaj tshuaj.

Sqlmap

Heev haib scanner uas ua hauj lwm nrog rau feem ntau databases. Nws txhawb ntau yam txoj kev siv ntawm SQL-txhaj tshuaj. Nws muaj lub peev xwm los txiav paub txog lub hom lo lus zais hash cracking thiab phau ntawv txhais lus. Tam sim no thiab tej ntaub ntawv upload thiab download los ntawm ib tug neeg rau zaub mov.

Installation rau Linux yog tau siv cov commands:

• git clone https://github.com/sqlmapproject/sqlmap.git sqlmap-dev,
• cdsqlmap-dev /,
• ./sqlmap.py --wizard.

Rau lub qhov rais yog muaj raws li ib qho kev xaiv nrog qhov hais kom ua kab thiab graphical neeg siv interface.

jSQL Txhaj

jSQL Txhaj - ib tug ntoo khaub lig-platform cuab tam rau kev soj ntsuam rau kev siv ntawm SQL vulnerabilities. Sau nyob rau hauv Java, ces cov system yuav tsum tau ntsia JRE. Tau lis TAU thov, NCEJ, header, cov kua nplaum uas. Nws muaj ib tug yooj yim graphical interface.

Lub installation ntawm no software pob yog raws li nram no:

wget https://github.com/`curl -s https: //github.com/ron190/jsql-injection/releases | grep-E -o '/ron190/jsql-injection/releases/download/v[0-9]{1,2}.[0-9]{1,2}/jsql-injection-v[0-9] . {1,2} [0-9] {1,2} .jar '| lub taub hau-n 1`

Pav tua ya yog los ntawm kev siv qhov hais kom ua java -jar ./jsql-injection-v*.jar

Nyob rau hauv thiaj li yuav pib lub xeem qhov chaw nyob rau hauv SQL-ruaj khov, koj yuav tsum sau qhov chaw nyob nyob rau hauv lub saum toj teb. Lawv yog cov cais rau GET thiab NCEJ. Nrog ib tug zoo tshwm sim, daim ntawv teev cov muaj ntxhuav yuav tshwm sim nyob rau hauv rau sab laug qhov rais. Koj yuav saib tau lawv thiab kawm tej ntaub ntawv.

tab «Admin page» siv tau los nrhiav tus thawj tswj panels. Nyob rau nws los ntawm txoj kev tshwj xeeb templates txiav searches lub system ntaub ntawv privileged cov neeg siv. Los ntawm lawv koj yuav tau txais ib tug cia li hash ntawm lo lus zais. Tiam sis nws muaj nyob rau hauv lub toolbox ntawm qhov kev pab cuam.

Tom qab nrhiav tau tag nrho cov vulnerabilities thiab txhaj tsim nyog nug, lub cuab tam yuav tso cai rau cov neeg rau zaub mov rau sau nyob rau hauv koj cov ntaub ntawv los yog, conversely, download tau nws los muaj.

SQLi Dumper v.7

Qhov kev pab no - yooj yim rau siv lub cuab tam rau nrhiav thiab siv SQL vulnerabilities. Nws ua lub UN yog raws li nyob rau hauv lub thiaj li hu ua Daukha ciaj. Lawv daim ntawv teev muaj nyob rau hauv Internet. Dorca rau SQL-txhaj - cov no yog cov tshwj xeeb templates ntawm nrhiav queries. Nrog lawv pab, koj yuav nrhiav tau muaj feem lam tau lam ua qhov chaw los ntawm tej yam search engine.

Cov cuab yeej rau kev kawm

Itsecgames.com rau ntawm qhov chaw muaj ib tug tshwj xeeb txheej txheem uas tso cai rau cov piv txwv qhia tau hais tias yuav ua li cas yuav ua li cas SQL txhaj tshuaj thiab kuaj nws. Nyob rau hauv thiaj li yuav tau txais txiaj ntsim, nws yog tsim nyog mus download tau thiab nruab. Lub archive muaj ib co ntawm cov ntaub ntawv, uas yog tus qauv ntawm lub site. Rau nruab nws yuav tsum tau nyob rau hauv lub uas twb muaj lawm system ntawm txheej ntawm Apache web neeg rau zaub mov, MySQL thiab PHP.

Unpack archive nyob rau hauv ib tug web neeg rau zaub mov ntawv tais ceev tseg, koj yuav tsum mus rau qhov chaw nyob nkag mus hauv thaum txhim kho no software. A nplooj ntawv nrog neeg rau npe. Ntawm no koj yuav tsum sau koj cov ntaub ntawv thiab nyem «Tsim». Tsiv tus neeg siv mus rau ib tug tshiab screen, cov system qhia rau koj xaiv ib qho ntawm cov kev xeem no. Co muaj ob piav los ntawm kev txhaj tshuaj, thiab ntau lwm yam kev kuaj yam khoom.

Nws yog ib nqi xav tias yuav ib qho piv txwv ntawm SQL-txhaj hom GET / Nrhiav. Ntawm no koj yuav tau xaiv nws thiab nias «Hack». Ua ntej tus neeg siv yuav tshwm sim, thiab nrhiav txoj hlua imitation ntawm ib tug yeeb yam ntawm qhov chaw. Yuav kom xaiv tau cov tsos tau ntev ntev. Tab sis muaj tsuas yog 10. Piv txwv li, koj muaj peev xwm sim mus rau nkag mus rau hauv lub Hlau txiv neej. Nws yuav qhia tau tias cov zaj duab xis, ces qhov chaw ua hauj lwm, thiab cov ntxhuav nws muaj. Tam sim no peb muaj rau kos yog hais tias tus cim tshwj xeeb tsab ntawv cov ntxaij lim dej, nyob rau hauv particular quote. Ua li no, ntxiv 'nyob rau hauv qhov chaw nyob bar. " Ntxiv mus, qhov no yuav tsum tau ua tom qab lub zaj duab xis lub npe. Lub tsev kawm ntawv yuav muab ib qho yuam kev yuam kev: Koj muaj ib qho yuam kev nyob rau hauv koj SQL syntax; tshawb xyuas cov phau ntawv uas ua raws li koj MySQL neeg rau zaub mov version rau hauv txoj cai syntax siv nyob ze '%' 'ntawm kab 1, uas hais tias lub cim tseem tsis leej twg kom raug. Yog li ntawd koj yuav tau sim kom hloov koj daim ntawv thov. Tab sis peb yuav tsum xub xam tus naj npawb ntawm teb. Nws yog siv rau kev txiav txim no los ntawm, uas yog qhia tom qab lub quotes: http://testsites.com/sqli_1.php?title=Iron+Man 'txiav txim los ntawm 2 - & txiav txim = nrhiav.

Qhov no hais kom ua tsuas qhia ntaub ntawv hais txog cov naam, uas yog, tus xov tooj ntawm teb yog ntau tshaj 2. Tus ob hyphen qhia cov neeg rau zaub mov hais tias cov lwm yam kev thov yuav tsum tau muab pov tseg. Tam sim no peb muaj txheeb tawm, muab ua tseem ceeb raws li ntev raws li qhov yuam kev yog tsis sau. Nyob rau hauv lub kawg, nws hloov tawm hais tias lub teb yuav 7.

Tam sim no nws yog lub sij hawm kom tau ib yam dab tsi pab tau tawm ntawm lub hauv paus. Yuav me ntsis hloov qhov kev thov nyob rau hauv qhov chaw nyob bar, nqa nws mus rau ib tug daim ntawv: http://testsites.com/sqli_1.php?title=Iron+Man 'union xaiv 1, database (), neeg (), 4, lo lus zais, 6, 7 los ntawm cov neeg - & txiav txim = nrhiav. Raws li ib tug tshwm sim ntawm nws txoj kev siv yuav tso saib cov hlua nrog rau lo lus zais hashes, uas muaj peev xwm muab tau yooj yim hloov dua siab tshiab rau hauv to taub cim siv ib tug ntawm cov nyob hauv internet pab. Ib tug conjured ib tug me ntsis thiab khaws ib daim teb lub npe nrog ib tug ID nkag mus, koj yuav tau nkag mus rau ib tug neeg lwm tus nkag teb chaws, xws li admin ntawm qhov chaw.

Cov khoom muaj ib tug luj hom txhaj tshuaj hom, nyob rau hauv uas mus xyaum. Nws yuav tsum tau nco ntsoov tias daim ntawv thov ntawm cov kev txawj no nyob rau hauv lub network rau ntawm qhov chaw yuav tsum yog ib tug txhaum cai.

Txhaj thiab PHP

Raws li ib tug txoj cai, lub PHP-code thiab yog lub luag hauj lwm rau qhov tsim nyog ua thov los ntawm tus neeg siv. Yog li ntawd, nyob rau theem no koj yuav tsum tau tsim ib tug tiv thaiv tawm tsam SQL-txhaj nyob rau hauv PHP.

Ua ntej, peb muab ib tug ob peb yam yooj yim cov kev cai, nyob rau hauv lub hauv paus ntawm uas nws yog tsim nyog los ua tau li ntawd.

• Cov ntaub ntawv yuav tsum yeej ib txwm ua ntej raug muab tso rau hauv lub database. Qhov no yuav ua tau yog los ntawm kev siv uas twb muaj lawm kab zauv, los yog los ntawm Workers queries manually. Ntawm no, ib yam nkaus thiab, yuav tsum coj mus rau hauv tus account uas lub numeric qhov tseem ceeb yog hloov siab los ntseeg mus rau lub hom uas yuav tsum tau;
• Zam sim hawm caij nyoog ntau yam tswj lug.

Tam sim no ib tug me ntsis txog cov kev cai ntawm compiling queries nyob rau hauv MySQL los tiv thaiv tiv thaiv SQL-txhaj tshuaj.

Nyob rau hauv kos duab txog tej kab zauv rau query nws yog ib qho tseem ceeb rau cov cais cov ntaub ntawv los ntawm lub SQL keywords.

• Xaiv * FROM rooj QHOV TWG lub npe = Zerg.

Nyob rau hauv no configuration, cov system yuav xav hais tias Zerg - lub npe ntawm tej teb, li ntawd, koj yuav tsum tau muab nws nyob rau hauv quotes.

• Xaiv * FROM rooj QHOV TWG lub npe = 'Zerg'.

Txawm li cas los, muaj tej lub sij hawm thaum tus nqi ntawm nws tus kheej muaj quotes.

• Xaiv * FROM rooj QHOV TWG lub npe = 'Côte d'Ivoire.

Ntawm no tsuas lis ib feem ntawm Côte d, thiab tus so yuav ntaus nqi raws li ib pab neeg, uas, ntawm chav kawm, tsis yog. Yog li ntawd, ib qho yuam kev tshwm sim. Ces koj xav tau no zoo ntawm kev soj ntsuam kuaj cov ntaub ntawv. Ua li no, siv ib tug backslash - \.

• Xaiv * FROM rooj QHOV TWG lub npe = 'miv-d \' Ivoire '.

Tag nrho cov saum toj no yog hais txog mus rau lub kab. Yog hais tias qhov kev txiav txim yuav siv sij hawm qhov chaw nrog ib tug xov tooj, ces nws yuav tsis tau kev quotes los yog slashes. Txawm li cas los, lawv yuav tsum tau yuav tsum tau mus forcibly ua rau cov yam ntaub ntawv hom.

Muaj tswv yim pom zoo uas lub teb lub npe yuav tsum tau muab ntim rau hauv backquotes. Qhov no cim yog nyob rau sab laug sab ntawm lub keyboard, nrog rau ib tug tilde "~". Qhov no yog los xyuas kom meej tias MySQL yuav meej paub qhov txawv lub npe ntawm lub teb los ntawm koj lo lus tseem ceeb.

Dynamic ua hauj lwm uas muaj ntaub ntawv

Heev feem ntau, kom tau tej ntaub ntawv los ntawm lub database siv queries, generated dynamically. Piv txwv li:

• Xaiv * FROM rooj QHOV TWG tooj = '$ tooj'.

Ntawm no, cov kuj sib txawv $ xov tooj yog kis li kev txiav txim ntawm tus nqi ntawm lub teb. Yuav ua li cas yuav tshwm sim yog hais tias nws tau txais 'Côte d'Ivoire'? Yuam kev.

Kom tsis txhob no teeb meem, ntawm chav kawm, koj muaj peev xwm muaj xws li lub "khawv koob quotes" chaw. Tab sis tam sim no cov ntaub ntawv yuav mus kuaj qhov chaw uas tsim nyog thiab tsis tsim nyog. Nyob rau hauv tas li ntawd, yog hais tias tus code yog sau los ntawm txhais tes, koj muaj peev xwm siv ib tug me ntsis ntau lub sij hawm mus tsim resistant rau ntes cov system nws tus kheej.

Rau cov neeg sab nraud tas li ntawd ntawm ib tug luaj yuav siv mysql_real_escape_string.

$ Number = mysql_real_escape_string ($ tooj);

$ Xyoo = mysql_real_escape_string ($ xyoo);

$ Lus nug = "NTXIG RAU HAUV rooj (xov tooj, xyoo, cov tub kawm) QHOV TSEEM CEEB ( '$ tooj', '$ xyoo, 11)".

Txawm hais tias code thiab muaj zog nyob rau hauv volume, tsis tau muaj nws yuav ua hauj lwm ntau npaum li cas nyob xeeb dua qub.

placeholders

Placeholders - ib tug zoo ntawm cov cim uas tus system paub hais tias qhov no yog qhov chaw koj yuav tsum hloov ib tug tshwj xeeb muaj nuj nqi. Piv txwv li:

$ Sate = $ mysqli-> npaj ( "SELECT District LOS NTAWM Number QHOV TWG lub npe =?");

$ Sate-> bind_param ( "s", $ tooj);

$ Sate-> ua ();

Seem no ntawm code yuav siv sij hawm ib txoj kev kawm thov template thiab ces uake lub nce mus nce los tooj, thiab executes nws. Qhov no mus kom ze tso cai rau koj mus phua cov lus nug ua thiab nws siv. Yog li, nws yuav tau kev cawm dim los ntawm kev siv ntawm siab phem code yog SQL-.

Yuav ua li cas tej zaum yuav ib tug attacker

Kev pab tiv thaiv System - ib tug heev tseem ceeb, uas yuav tsis raug tsis saib xyuas. Ntawm cov hoob kawm, ib tug yooj yim ua lag ua luam daim ntawv rau ntawm qhov chaw yuav tsum yooj yim rau restore. Thiab yog hais tias nws yog ib tug loj portal, kev pab, lub rooj sab laj? Yuav ua li cas yog cov txim yog tias koj tsis xav txog kev ruaj ntseg?

Ua ntej, ib tug hacker yuav ua txhaum lub meej mom ntawm ob lub hauv paus thiab tshem tawm nws kiag li. Thiab yog hais tias lub site khiav dej num los yog hoster tsis ua ib tug thaub qab, koj yuav muaj ib qho nyuaj lub sij hawm. Saum toj no tag nrho, ib tug intruder, ntes ib zaug xwb site, yuav tau mus rau lwm cov muab tso rau hauv tib lub neeg rau zaub mov.

Tom ntej no yog tus tub sab ntawm tus kheej cov ntaub ntawv ntawm cov neeg tuaj saib. Yuav ua li cas siv - txhua yam yog tsuas los ntawm lub tswv yim ntawm ib tug hacker. Tab sis nyob rau hauv txhua rooj plaub, lub txim uas yuav tsis tau qab ntxiag heev. Tshwj xeeb tshaj yog yog hais muaj nyiaj txiag.

Tsis tas li ntawd, lub attacker yuav tshuam database koj tus kheej thiab ces extort nyiaj rau nws rov qab.

Tseeb cov neeg siv rau sawv cev ntawm lub site neeg khiav dej num, tus neeg uas lawv tsis ua, kuj yuav zoo txim li sai tau dag tseeb.

xaus

Tag nrho cov ntaub ntawv nyob rau hauv no tsab xov xwm no yog muab rau koj xwb. Siv nws tsuas yuav tau ntsuam xyuas lawv tus kheej tej yaam num thaum nws detects vulnerabilities thiab qhov lawv.

Rau ib tug ntau nyob rau hauv-tob txog kev kawm ntawm yuav ua li cas rau kev SQL-txhaj tshuaj, nws yog tsim nyog los pib nrog rau lub txoos kev tshawb fawb muaj peev xwm thiab cov yam ntxwv ntawm lub SQL lus. Raws li tso ua ke queries, keywords, cov ntaub ntawv hom, thiab kev siv ntawm nws tag nrho.

Kuj yuav tsis ua li cas tsis to taub lub lag luam ntawm PHP thiab HTML ntsiab zog. Lub hom siv lam tau lam ua cov ntsiab lus rau kev txhaj tshuaj - ib qho chaw nyob kab, thiab ntau yam kev tshawb fawb teb. Kawm PHP zog, cov qauv ntawm cov kev siv thiab nta yuav tau xyuas seb yuav ua li cas kom tsis txhob yuam kev.

Lub xub ntiag ntawm ntau npaj txhij-ua software cuab yeej pub rau nyob rau hauv-tob tsom xam rau ntawm qhov chaw lub npe hu vulnerabilities. Ib qho ntawm feem nrov khoom - Kali linux. Qhov no daim duab ntawm ib tug Linux-raws li operating system, uas muaj ib tug loj tus naj npawb ntawm cov cuab yeej thiab cov kev pab cuam uas yuav nqa tawm kev tsom xam ntawm qhov chaw lub zog.

Yuav ua li cas koj yuav tsum tau paub yuav ua li cas rau hack lub site? Nws yog heev yooj yim - nws yog tsim nyog yuav tsum paub txog lub peev xwm vulnerabilities ntawm koj qhov project los yog lub website. Tshwj xeeb tshaj yog yog hais tias nws yog ib tug nyob hauv internet khw uas nyob hauv internet them nqi, qhov twg cov nyiaj them cov neeg siv cov ntaub ntawv yuav tsum nyom los ntawm ib tug attacker.

Rau kev kawm txog cov uas twb muaj lawm ntaub ntawv kev ruaj ntseg cov neeg ua yuav tsum tau mus saib lub site rau ib tug ntau yam ntawm cov txheej xwm thiab tob. Pib los ntawm ib tug yooj yim HTML-tshuaj thiab mus rau kev sib engineering thiab phishing.