Skip to content

The clickjacking attack#90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aliemir merged 9 commits into from
Mar 9, 2020
Merged

The clickjacking attack #90

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
0e42991
Article.md çevirildi
Chainedge Feb 24, 2020
4f1c694
Merge pull request #1 from Chainedge/Chainedge-articlemd-1
Chainedge Feb 24, 2020
b9806ed
index.html çevrildi
Chainedge Feb 24, 2020
e675e8a
iframe.html çevrildi
Chainedge Feb 24, 2020
e5ed130
iframe.html çevrildi
Chainedge Feb 24, 2020
babe676
index.html çevrildi
Chainedge Feb 24, 2020
1c97d78
facebook.html çevrildi
Chainedge Feb 24, 2020
d375f42
index-visible çevrildi
Chainedge Feb 24, 2020
ca71a55
facebook-visible çevrildi
Chainedge Feb 24, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
169 changes: 85 additions & 84 deletions 3-frames-and-windows/06-clickjacking/article.md
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion 3-frames-and-windows/06-clickjacking/clickjacking-visible.view/facebook.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -3,7 +3,7 @@

<body style="margin:10px;padding:10px">

<input type="button" onclick="alert('Like pressed on facebook.html!')" value="I LIKE IT !">
<input type="button" onclick="alert('facebook.html'de beğen butonuna basıldı!')" value="BEGENDIM">
Comment thread
Chainedge marked this conversation as resolved.

</body>

Expand Down
6 changes: 3 additions & 3 deletions 3-frames-and-windows/06-clickjacking/clickjacking-visible.view/index.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -19,14 +19,14 @@
}
</style>

<div>Click to get rich now:</div>
<div>Zengin olmak için tıkla:</div>

<!-- The url from the victim site -->
<iframe src="facebook.html"></iframe>

<button>Click here!</button>
<button>Buraya tıkla!</button>

<div>...And you're cool (I'm a cool hacker actually)!</div>
<div>...Ve zengin oldun (ve sayfamı beğendin)!</div>

</body>
</html>
2 changes: 1 addition & 1 deletion 3-frames-and-windows/06-clickjacking/clickjacking.view/facebook.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -3,7 +3,7 @@

<body style="margin:10px;padding:10px">

<input type="button" onclick="alert('Like pressed on facebook.html!')" value="I LIKE IT !">
<input type="button" onclick="alert('facebook.html'de beğen butonuna basıldı!')" value="BEGENDIM!">

</body>

Expand Down
8 changes: 4 additions & 4 deletions 3-frames-and-windows/06-clickjacking/clickjacking.view/index.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -19,14 +19,14 @@
}
</style>

<div>Click to get rich now:</div>
<div>Zengin olmak için tıkla:</div>

<!-- The url from the victim site -->
<!-- Hedef sitenin url'si -->
<iframe src="facebook.html"></iframe>

<button>Click here!</button>
<button>Buraya tıkla!</button>

<div>...And you're cool (I'm a cool hacker actually)!</div>
<div>...Ve zengin oldun (ve sayfamı beğendin)!</div>

</body>
</html>
9 changes: 4 additions & 5 deletions 3-frames-and-windows/06-clickjacking/protector.view/iframe.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@
<body>

<div id="protector">
<a href="/" target="_blank">Go to the site</a>
<a href="/" target="_blank">Siteye git</a>
</div>

<script>
Expand All@@ -31,11 +31,10 @@

</script>

This text is always visible.
Bu yazı her zaman görünüt halde.
Comment thread
Chainedge marked this conversation as resolved.

But if the page was open inside a document from another domain, the div over it would prevent any actions.

<button onclick="alert(1)">Click wouldn't work in that case</button>
Ancak eğer sayfa başka bir alan adındaki bir dosyadan gelseydi üzerindeki div herhangi bir aksiyonu engellerdi.
<button onclick="alert(1)">Tıklama burada çalışmazdı</button>

</body>
</html>
2 changes: 1 addition & 1 deletion 3-frames-and-windows/06-clickjacking/top-location.view/iframe.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -7,7 +7,7 @@

<body>

<div>Changes top.location to javascript.info</div>
<div>top.location'ı javascript.info'ya çevirir</div>

<script>
top.location = 'https://javascript.info';
Expand Down
8 changes: 4 additions & 4 deletions 3-frames-and-windows/06-clickjacking/top-location.view/index.html
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -21,7 +21,7 @@

window.onbeforeunload = function() {
window.onbeforeunload = null;
return "Want to leave without learning all the secrets (he-he)?";
return "Gerçekten tüm kedileri görmeden ayrılmak istiyor musunuz?";
};

document.body.insertAdjacentHTML('beforeend', '<iframe src="iframe.html">');
Expand All@@ -31,11 +31,11 @@

<body>

<p>After a click on the button the visitor gets a "strange" question about whether they want to leave.</p>
<p>Bir tıklamadan sonra kullanıcı ayrılmak isteyip istemediğine dair garip bir mesaj alır.</p>

<p>Probably they would respond "No", and the iframe protection is hacked.</p>
<p>Büyük ihtimalle "Hayır" cevabını vereceklerdir, ve iframe koruması çöker.</p>

<button onclick="attack()">Add a "protected" iframe</button>
<button onclick="attack()">"Korumalı" bir iframe ekle</button>

</body>
</html>