Legal Robot · Report #163888
Click Jacking
How it was found
Hey legalRobot! I have found Click Jacking type of Vulnerability in your Website
Now The Question is What is Click Jacking. Click Jacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages.
How to Produce Click Jacking in your Website, Steps to Produce this Issue:-
- Create new .Html file. (I also send this file to you)
- Copy & Paste this code in Html & save it `<html> <head> <title>Clickjack test page</title> </head> <body> <p>Website is vulnerable to clickjacking!</p> <iframe src="https://www.legalrobot.com/" width="500"
height="500"></iframe>
</body> </html>` 3) Open that html file and you are seeing your website content opening in other frame.Fix: Use a proper X-Frame to your website, So other domains can not use your website content, Mostly Spammers & Attackers can use this technique. (See My Example File too)
Get More Help From Owasp guides: https://www.owasp.org/index.php?title=Testing_for_Clickjacking_(OTG-CLIENT-009)&setlang=en https://www.owasp.org/index.php/Clickjacking https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet
Glad to be, If you fix this Click Jacking flaw in your website, Thanks! Regards: Muhammad Muhaddis (Cyber Security Researcher)