3 ms·
Anyone have a link to a more detailed writeup on exactly how this was implemented?
by rhgraysonii 12y ago
Anyone have a link to a more detailed writeup on exactly how this was implemented?
- joshfraser 12y agoI can post the code. It just doesn't work anymore since they fixed the hole. Edit: https://gist.github.com/joshfraser/819308dbae43ff70d892 https://gist.github.com/joshfraser/819308dbae43ff70d892
- canadaj 12y agoPlease do, it would be interesting to see how it works.
- joshfraser 12y agoThis hack is classic clickjacking. I created a transparent iframe containing a product page on amazon.com that had been carefully positioned so when you think you’re clicking on my page, you’re actually clicking the “Buy now” button on their site instead. Here’s the link to the code for the no longer working proof of concept: https://gist.github.com/joshfraser/819308dbae43ff70d892 https://gist.github.com/joshfraser/819308dbae43ff70d892