Posts

Showing posts from November, 2013

Clickjacking

Image
Clickjacking also known as UI Redressing,is one of Malicious Technique tricking users to click the button/image that will run hidden malicious script from another site. An attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the innocuous page. Thus an attacker hijack the click to another website.  That's why it is known as Clickjacking(Click+Hijacking).  The term "clickjacking" was coined by Jeremiah Grossman and  Robert Hansen  in 2008. Clickjacking Attack can be used for: Tricking users to turn on their webcam and microphone using this adobe vulnerability (this security flaw fixed by adobe) Getting more Twitter Followers Post in your facebook wall. Can delete your profile. Prevention Techniques: Client Side(Security tips for users): Flash Player: Update your Flash Player(old version are vulnerable to Clickjac...