Hello, everyone, welcome to this video.
So in this video, we are going to see how you can increase the severity of click jacking attack.
As we all know that whenever you identify a trigger based vulnerability into any target of application
at that particular point of time, this vulnerability is considered as a low one liability.
But in case you are able to identify any sensitive action onto the target web application or you are
able to do any sensitive action onto the target Web site, then the severity jumps to a high or medium
level.
So it depends how you can utilize Click Jianqing to perform a sensitive action and bump the severity
of the Target website.
So for that, we have created a particular tool which is going to help you to increase the severity
of click checking based attacks.
Now, as you can see onto the screen, there are three buttons, namely Drag Me, which is a login button.
You can see an email button and you can see drag me passwords.
So the main scenario that we are going to create over here is we are going to drag these buttons on
to an actual vulnerable target application and we are going to put this email and password and login
buttons over the target web applications actual button.
And we are going to impersonate the target of application and then we are going to exploit the click
checking scenario now before doing this.
Let's understand how you can utilize this so that you will be able to understand.
Now, I have opened this particular tool from my localhost machine.
As you can see, the you are is the user through it like stopwork courses.
You remixers click check tool and indexed at G.M. So I will just reload this again to confirm.
Now you can see this particular tool is running in the original file, so I'm going to attach the code.
So with a description.
So you guys, you guys can use it from the resources section.
Now once you have done this, it is going to open something like this.
Now, let's try to load a venerable website over here where you can see you are.
So let me just quickly open or vulnerable of application for demonstration.
I'm going to choose this wonderful application, but just test BHP DOT Will Web.com and I'm going to
click on lowed.
Once I click on Load, it is going to load it into the background, as you can see over here.
So I'm going to drag this onto the right hand side so you can clearly see the website over here.
So now this website has successfully loaded into an iFrame.
Now I'm going to click on your profile so it asks me to login.
Now, this is a sensitive action, which is to login.
All right.
Now, what I'm going to do is I'm I'm going to craft my click checking PEOC over here.
So let me just drag this email onto the user name part.
As you can see over here, you have to match this particular white feel about exactly the username feel.
So let me just put it over here.
You do not need to be perfect into this, but you just need to put it above that.
Let's drag the password button and let's keep it over here as well.
Now, the login one.
Let's keep it over here.
All right.
Now it looks perfect and we are going to craft this so that we basically can show the impact or demonstration
of click checking at the attack onto this Web application to increase the severity.
Now, once you have done this, you just need to click on load.
So I'm sorry.
You just need to click on View.
So once you click on View, you will be able to see a new sandbox start.
XHTML page has successfully opened automatically.
And you can see there are two fields which are overlapping or overlaying on to the previous field,
as you can see over here.
Now, once the user logs in over here.
So let me show you by giving a user name, test and password as admin and hit signing and let's see
what happens.
So once I click assigning, you can see.
Speed chase, captured credentials are usernames and passwords admin.
So this way, the attacker is able to capture the credentials and the credentials that we used was username
and password admin.
So like this in this scenario, if any victim logs in over here, then he is going to give out his credentials.
So this is one of the best way to demonstrate the winnability that you are able to steal the credentials
of any user using click jacking.
So this jumps the severity from low to high and this is how you do it.
Now, for some cases, how are you going to receive these credentials onto the attackers place or to
attack a server?
So let's say you have sended this particular link to any victim and the victim opens up this particular
page.
It looks something like this.
Now, how is the victim when he logs in?
How are how are the credentialled going to be sent to the attacker so far that this code also contains
a window, that location, not address, but says send the credentials to this particular.
You are.
So this demonstration I have been running a localhost server, which will get the email and password.
So we are already getting it into an alert, which you have already seen.
Let me show you again.
So let's say I type your admin and password, also admin and signing it, able to see into the alert
the captured green credentials.
Now, it is also going to send it over here.
As you can see, we are able to receive the credentials onto the server that I am running.
So the command to run the server is very simple.
You just need to type HP hyphen s CAPITALIS localhost and any port number you want.
So we are we have started successfully a server.
As you can see it is listening on localhost board eight thousand and one.
And whenever the victim clicks or victim tries to login, the attacker is going to get the credentials.
And this way the attacker can take these credentials to login into the target of an application.
So I hope this is clear and you understand how you can utilize this particular tool to create policies
for any click checking based vulnerabilities and increase the security.
Thank you.