Clickjacking in main domain https://topechelon.com/
该报告还没有中文解读。
原文摘录
摘自原文(2621 字符中的一小部分)
**Summary:** The target website is vulnerable to Clickjacking, a web-based attack that tricks users into interacting with a hidden or disguised iframe. Attackers can exploit this vulnerability to manipulate user actions, potentially leading to unauthorized activities such as unintended clicks, form …
原文中的代码
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Clickjacking PoC</title>
<style>
iframe {
position: absolute;
top: 0;
left: 0;
width: 100%;
height: 100%; …默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Top Echelon Software 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @genz-1 · 版权归作者与 Top Echelon Software 所有