Hello, everyone.
So in this video, we are going to see one of the proof of concept for click checking type of attack.
So in this video, we will see how you can identify if any website is vulnerable to click jacking attack,
how you can practically code a click jacking, vulnerable rebel and test for any website if it loads
into your post code to confirm the website is when they're able to click checking.
So let's quickly see this.
So here we have taken a life target in which it is an ice cream website.
So I'm going to load this website into my one of the U.S. code to confirm if there exists a click juking
venerability.
So as you can see, I have successfully loaded Target and it is getting loaded over here now.
I will copy the U all from here.
And this is the U.S. Code, which I have saved into my favorite text editor.
You can choose as per your reference, whatever you like.
Also, you can save it into your conventional notepad or notepad plus plus if you have not installed
sublime.
All right.
Now, quickly, let's understand the code or actually we have written and we are able to do the click
track.
As you can see over here, we have the Click Jack Test page, which is basically the click jacking attack.
So we have started with the e-mail and it's close.
This is basically the boilerplate which says that this is a dismal file then head title we have given.
We have closed the head body.
A paragraph at its website is one level to click tracking and the most important part, which is the
iFrame, as you can see over here, we have given the iFrame sirc, which is the iFrame source of the
website that we want to test on to confirm if it is one level.
And just for the convenience, we have given the width and the height as five hundred and five hundred.
Now you just have to save this particular code with the name.
Anything that you want an extension as dot HDMI.
Once you have saved this file you have to open this with your browser.
So I have saved this with the name as click jack the you dot xhtml.
Now when I open it with the browser you can see over here I think it's loaded with 500 pixels of height
and 500 pixels of print and the website successfully gets loaded into our iFrame which thus confirms
the existence of the vulnerability onto the particular target.
So I hope you guys understood how to do this particular PEOC.
It was very quick and pretty simple to identify if any website is vulnerable to the click jacking attack
through the PUC.
Thank you.