Comments on: Twitter Click-Jacking Vulnerability http://www.darknet.org.uk/2009/03/twitter-click-jacking-vulnerability/ Ethical Hacking, Penetration Testing & Computer Security Sat, 21 Nov 2009 06:04:59 +0000 http://wordpress.org/?v=2.8.6 hourly 1 By: dblackshell http://www.darknet.org.uk/2009/03/twitter-click-jacking-vulnerability/#comment-131361 dblackshell Thu, 05 Mar 2009 18:51:08 +0000 http://www.darknet.org.uk/?p=1556#comment-131361 clickjacking & twitter... have tried cooking an attack vector against their clickjacking protection for a couple of hours until finally gave up. Even so there is a thing to note. If you load their page as an object (not iframe) their clickjacking protection delays for a second or two... Haven't managed to find a way that a user would click where I want in that specified time frame, but when I get more time at hands I will try to find a way to accomplish this... hopefully with some results.. clickjacking & twitter… have tried cooking an attack vector against their clickjacking protection for a couple of hours until finally gave up.

Even so there is a thing to note. If you load their page as an object (not iframe) their clickjacking protection delays for a second or two… Haven’t managed to find a way that a user would click where I want in that specified time frame, but when I get more time at hands I will try to find a way to accomplish this… hopefully with some results..

]]>