ClickJacking

Install Comitari-Free http://www.comitari.com/Comitari-Free_ClickJacking_Protection
Protect yourself against all ClickJacking attacks. It's free!!

More Info @ http://narkolayev-shlomi.blogspot.com/
I'm found that websites like Facebook and many others "protected" websites are vulnerable to ClickJacking attacks.
I have informed some mass users websites like Facebook and Microsoft with my foundings.
Facebook respond:

This demo video presenting how can I fool Facebooks' users to add applications to their account.

I could write malicious application that steals users personal info or even simple application that build for me a bot net users for malicious purposes like hacking systems for SQL Injections and DDOS attacks.

Using ClickJacking I also could fool users to click what ever I want: adding me as their friend, delete their account, and even open their camera and microphone using flash (Older versions then 10.x), or install Facebooks' applications that posting their web camera and microphone every time they connected to Facebook - Just use your imagination on what you want others to click on (Maybe transfer to you poker chips???)...
http://news.cnet.com/8301-27080_3-10436698-245.html
http://www.zdnet.com/blog/security/researcher-demos-clickjacking-attack-on-fa...

Category:

Science & Technology

Tags:

• ClickJacking
• Facebook ClickJacking
• UI Rendering
• Hacking Facebook
• Hackers
• Shlomi Narkolayev