clickjacking

Overlay a transparent iframe of a target site on top of a decoy UI and harvest clicks meant for innocent buttons. UI redress, mouse hijack, drag and drop.

← all categories

Clickjacking, also called UI redressing, lures a user into clicking on something different from what they perceive. The attack stacks an attacker page on top of a transparent iframe pointing at a target site so clicks land on the target's buttons.

The labs cover basic frame overlays, frame busting and busting the busters, mouse-following decoys, drag-and-drop attacks, and the modern defenses: X-Frame-Options, Content-Security-Policy: frame-ancestors, and SameSite cookies.

// labs

0 live · 0 total

> no labs in this category yet, still cooking.