In a situation where a web page is not using SSL and someone wants to attack to gain the username and password. How it can be done?
Given the situations:
- Passwords are not stored in plain text.
- Client side used languages : JavaScript, HTML, CSS
- Server languages: any
- One can try server side/client side attack.