Hi folks,
yet another quick 'n dirty post on ClickJackign Attempts for personal memories. If you are interested on ClickJacking techniques I strongly suggest
this reading (Frightened by Links, Franco Callegati and Marco Ramilli).
As you see in the top left corner a little iFrame is loaded ;). It includes a main.php (unfortunately right now has been removed) which is (was) able to load uncontrolled content. The front-end represents a youtube page (https://japan20111.tk/widget.php).
And an external JavaScript is loaded.
Easy, but effective, like every ClickJacking attempts is ... For more complete ClickJacking analysis:
here and
here
