Hello, everyone, and welcome to this video.
So in this video, we are going to see alive exploitation of click jacking when liability.
All right.
So we already know about tracking attacks and how an attacker can utilize this to make this low level
vulnerability a high level one liability.
So let's quickly jump into this video and see how can we actually simulate a click tracking based on
liability and show it exploitation and security to the target program.
So far, this, as you can see over here, my target is only Tartine.
So I'm going to use this website to demonstrate the attack.
So, first of all, I'm going to create an account under this overapplication.
As you can see, I have successfully signed up and now I'm going to do my verification.
Once the verification is done, I will have a valid account on this website.
So let's just wait and let me complete the verification part and we can move ahead.
Now, you can take any Web application that you want to prove based on liabilities if the page is successfully
loading into your iFrame.
So I have identified this website to be able to click tracking because they do not have proper mitigations
for checking based on liability.
Therefore, there are no extreme options.
So once I have identified the target, I am creating account over here.
As you can see, I have successfully created account and I am now logged into my account as well.
I'm just updating my last name details to show you guys that I have successfully logged in and I have
the rights to update the details of my account.
All right.
As you can see, I have created my account as well and I can update my details as well, which proves
that I am logged into my account.
Now, we require the click track tool that we have created to do the click tracking exploitation.
Now, one thing to remember here is I'm going to prove this vulnerability onto my localhost website.
OK, so what you guys can do is you can also create the same possie onto your localhost website.
You can create it into your computer or else you can host your PC or your website onto any online free
service like triple zero Web post.com in case you do not have your own personal website.
Or you can post it on your personal website as well.
The steps would be exactly the same.
So let me just go into that folder.
So I'm into the folder right now and the folder name is clicked actually.
And again, these are the files which are inside that folder.
Our important file is the index card XHTML.
So I'm going to start a quick BHP server using the command hyphen s localhost Coolen eight thousand
and one.
So it is the portal number on which I have started my local HP server.
Perfect.
Now let's verify our BHP server has started and you can see successfully my server has started.
So let's copy our target.
You are a link and paste it over into the yard and load.
As you can see, my target has successfully loaded into our localhost server that we have created.
And again, see, this is exactly the same target which has successfully loaded and I am even logged
into my account.
So let us quickly first load off of our account.
So I have logged out of my account.
Let me again load it, as you can see.
Yeah, perfect.
Now you can see I am presented with the username password field.
So let me get back to the username password field and it was only logged in slash log out.
So I should be able to get the logging onto the login and print.
All right.
So I have to login and print right now.
So we are going to craft a policy where we are going to first track the email, which is the first field,
which is the email address will and keep it over here.
So I'll just place it.
You're running only to be perfect in placing it.
You can place it as well as you want.
Just a little bit on to the username and password field and let's place the login button over the login
field or else let's do one thing.
Let's be stored in the center instead of placing it onto the left.
So if you have any issues in dragging this, I remember you just have to hold.
The button and rugged, you just don't have to click it and move your mouse mouse pointer.
You have to actually hold it and drag it, then it will work.
All right.
So I have dragged it over here.
Now I will hit view button.
Now, let's see what happens when we hit the view button.
All right.
So you can see it looks perfectly fine and our buttons have successfully overlapped the e-mail address.
Will the password feel and the sign in button, which looks perfect for us.
Now, you can notice over here we are on to over localhost.
This is our local hospital.
And as I mentioned before, the starting of the video, you can host this application, which we hosted
into our local BHP Solar on the Alive or website as well.
If in case you do not have any of the websites you can hosted on triple zero Web hosting Dotcom, it
provides you free hosting and you can host this bucy there and you can prove the floor as well.
The steps are exactly the same.
All right, so now we have successfully loaded it all here, so let's assume the victim comes over our
this target and he thinks like he have to login into the only website because it is successfully getting
loaded into our iFrame.
So he gives his username and password clicks on.
I'm not a robot, so bypasses.
So let's bypass this by giving the correct.
Capture and hit on Titan, and you can see perfect captured credentials are username is Hakodate Udemy
A.T.M. dot com password is admin and trade.
One, two, three.
So this way the attacker is able to successfully get hold of the credentials in which he has got the
username and password for the demonstration.
We here, we have put or allowed the credentials to be into the ballot box.
In real case scenario, this will be automatically send it to the attack as Web server that we have
already seen into the previous video and we have seen how the credentials are sent to the attackers
server.
So I hope you guys understood how you can make and demonstrate this attack to prove the severity and
how you can perform the exploitation.
Thank you.