Friday, 9 October 2015

hack every thing facebook gmail etc clickjacking

What is Clickjacking:

Clickjacking attack allows to perform an action on victim website, Mostly Facebook and Twitter accounts are targetable.
when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the top
level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to other another page, most likely owned by another application, domain, or both. It may be similar to CSRF Cross Site Request Forgeries Attack.  


Clickjacking is a term first introduced by Jeremiah Grossman and Robert Hansen in
2008 to describe a technique whereby an attacker tricks a user into performing certain actions on a website by hiding clickable elements inside an invisible iframe.


Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they
are typing in the password to their email or bank account, but are instead typing into
an invisible frame controlled by the attacker. 


At present this attack mostly use on social network websites like Facebook and twitter, Because this attack is used by convinced victim for click on the link and SocialNetwork website might be very useful for attack on victim.

One famous example of clickjacking is Facebook.

Code:

 <style>
 iframe { /* iframe from facebook.com */
  width:300px;
  height:100px;
  position:absolute;
  top:0; left:0;
  filter:alpha(opacity=50); /* in real life opacity=0 */
  opacity:0.5;
}
</style>

<div>Click on the link to get more followers:</div>
    
<iframe src="/files/tutorial/window/clicktarget.html"></iframe>

<a href="http://www.google.com" target="_blank" style="position:relative;left:20px;z-index:-1">CLICK ME!</a>

<div>You'll be get 10000 followers..!!</div>

Output:
Click on the link to get more followers
Click Me
You'll be get 10000 followers..!!


Download
ClickJacking Tool


For Defence:
Clickjacking Protection



For more information:
OWASP
Continue reading

Sunday, 25 May 2014

DIRECT LINK TO CONECT FACEBOOK ON MIG ACCOUNT

DIRECT LINK TO CONECT FACEBOOK ON MIG ACCOUNT


HOW TO CONECT FACEBOOK IN YOUR MIG ACCOUNT USING DIRECT LINK
IN NEPAL ,mig33 gained popularity in short period of time.it is one of the most used application for chating .now I am going to share a method  to conneet facebook in your account.there is always a problem while authorizing the mig account to your facebook  account  through mobile.Now  I am going to share this link   http://www.mig33.com/sites/index.php?c=im&a=facebook_setup&c=wap.                                                         click on this link and floow some simple step which are given below:
1.open this link
2.fill username box using your mig id
3.fill your mig id’s password in password box
4.click on sign in
5.click here to authorize mig33  to connect  with facebook profile (here click on click here option)
6. now your facebook account connect with mig account.
7. enjoy
Thanks for visit my blog post .you can add me in mig account (towistme)
We have some short id if you want to purchase contact with me. my email id is pramodhelper@gmail.com
                        FACEBOOK TRICK ARE HERE: www.facebookandmigtrick.blogspot.com
Continue reading

Thursday, 22 May 2014

LATEST FACEBOOK AND MIG TRICK

LATEST FACEBOOK AND MIG TRICK

BEST Facebook and  mig33 tips and trick
Welcome friends, now I am going to share latest and new facebook and mig33 tips and trick. Facebook is a social network to chat. it is a  chatting application. to use our latest and new facebook trick. just copy and past given code in your chat box,comment,box or  share. TO copy facebook code visit this my site http://pramod.waphall.com   her you can find some trick but very useful. If you have get any problems  OR IF YOU WANT TO HACK FACEBOOK A/Contact me:
          ****** Hi now learn about my new mig33 trick*****
I am a real mig user(etl_nepal). if you are mig fans , I am going to share a simple trick.
               To set free bot in mig33 account id floow this simple step.
1.login mig id in your mig application click here to download mig application http://mig33.com
2.enter in any chatroom and press menu click on private chat.
3.click on ‘enter username’ option and type face_buz
4.you wiil be open a window type .help
5.you have got a message type  .login in first line and type ‘your id’# ‘your password’
6. now bot is set in your id  .it auto post ,auto play game ,chat in any chat room etc.

**You can earn more usd by playing low card game in mig33.just paste this code when you needs to draw. Code:!D .>’replace your id first 3 letters’
**
**GPRS SPEED  UP **JOIN ANY CHAT ROOM AND TYPE .MB
**TO MAKE DC JUST TYPE .DC IN PRIVATE CHAT AND LOOK MAGICE
**TO HACK MIG ACCOUNT WITHOUT SOFTWARE JUST CONTACT MEpramodhelper@gmail.com
**                   TO RESET MIG ACCOUNT SECURITY QUESTION WITHOUT PASSWORD CONTACT ME :+9779862000489(NEPAL)

Continue reading