Skip to content

Commit 77f8ca2

Browse files
authored
Merge pull request #90 from Chainedge/master
The clickjacking attack
2 parents 637f49b + ca71a55 commit 77f8ca2

File tree

8 files changed

+103
-103
lines changed

8 files changed

+103
-103
lines changed

3-frames-and-windows/06-clickjacking/article.md

Lines changed: 85 additions & 84 deletions
Large diffs are not rendered by default.

3-frames-and-windows/06-clickjacking/clickjacking-visible.view/facebook.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
<body style="margin:10px;padding:10px">
55

6-
<input type="button" onclick="alert('Like pressed on facebook.html!')" value="I LIKE IT !">
6+
<input type="button" onclick="alert('facebook.html'de beğen butonuna basıldı!')" value="BEGENDIM">
77

88
</body>
99

3-frames-and-windows/06-clickjacking/clickjacking-visible.view/index.html

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@
1919
}
2020
</style>
2121

22-
<div>Click to get rich now:</div>
22+
<div>Zengin olmak için tıkla:</div>
2323

2424
<!-- The url from the victim site -->
2525
<iframe src="facebook.html"></iframe>
2626

27-
<button>Click here!</button>
27+
<button>Buraya tıkla!</button>
2828

29-
<div>...And you're cool (I'm a cool hacker actually)!</div>
29+
<div>...Ve zengin oldun (ve sayfamı beğendin)!</div>
3030

3131
</body>
3232
</html>

3-frames-and-windows/06-clickjacking/clickjacking.view/facebook.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
<body style="margin:10px;padding:10px">
55

6-
<input type="button" onclick="alert('Like pressed on facebook.html!')" value="I LIKE IT !">
6+
<input type="button" onclick="alert('facebook.html'de beğen butonuna basıldı!')" value="BEGENDIM!">
77

88
</body>
99

3-frames-and-windows/06-clickjacking/clickjacking.view/index.html

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@
1919
}
2020
</style>
2121

22-
<div>Click to get rich now:</div>
22+
<div>Zengin olmak için tıkla:</div>
2323

24-
<!-- The url from the victim site -->
24+
<!-- Hedef sitenin url'si -->
2525
<iframe src="facebook.html"></iframe>
2626

27-
<button>Click here!</button>
27+
<button>Buraya tıkla!</button>
2828

29-
<div>...And you're cool (I'm a cool hacker actually)!</div>
29+
<div>...Ve zengin oldun (ve sayfamı beğendin)!</div>
3030

3131
</body>
3232
</html>

3-frames-and-windows/06-clickjacking/protector.view/iframe.html

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
<body>
2121

2222
<div id="protector">
23-
<a href="/" target="_blank">Go to the site</a>
23+
<a href="/" target="_blank">Siteye git</a>
2424
</div>
2525

2626
<script>
@@ -31,11 +31,10 @@
3131

3232
</script>
3333

34-
This text is always visible.
34+
Bu yazı her zaman görünüt halde.
3535

36-
But if the page was open inside a document from another domain, the div over it would prevent any actions.
37-
38-
<button onclick="alert(1)">Click wouldn't work in that case</button>
36+
Ancak eğer sayfa başka bir alan adındaki bir dosyadan gelseydi üzerindeki div herhangi bir aksiyonu engellerdi.
37+
<button onclick="alert(1)">Tıklama burada çalışmazdı</button>
3938

4039
</body>
4140
</html>

3-frames-and-windows/06-clickjacking/top-location.view/iframe.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77

88
<body>
99

10-
<div>Changes top.location to javascript.info</div>
10+
<div>top.locationjavascript.info'ya çevirir</div>
1111

1212
<script>
1313
top.location = 'https://javascript.info';

3-frames-and-windows/06-clickjacking/top-location.view/index.html

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121

2222
window.onbeforeunload = function() {
2323
window.onbeforeunload = null;
24-
return "Want to leave without learning all the secrets (he-he)?";
24+
return "Gerçekten tüm kedileri görmeden ayrılmak istiyor musunuz?";
2525
};
2626

2727
document.body.insertAdjacentHTML('beforeend', '<iframe src="iframe.html">');
@@ -31,11 +31,11 @@
3131

3232
<body>
3333

34-
<p>After a click on the button the visitor gets a "strange" question about whether they want to leave.</p>
34+
<p>Bir tıklamadan sonra kullanıcı ayrılmak isteyip istemediğine dair garip bir mesaj alır.</p>
3535

36-
<p>Probably they would respond "No", and the iframe protection is hacked.</p>
36+
<p>Büyük ihtimalle "Hayır" cevabını vereceklerdir, ve iframe koruması çöker.</p>
3737

38-
<button onclick="attack()">Add a "protected" iframe</button>
38+
<button onclick="attack()">"Korumalı" bir iframe ekle</button>
3939

4040
</body>
4141
</html>

0 commit comments

Comments
 (0)