diff --git a/resources/views/hacker/csrf-exploit.blade.php b/resources/views/hacker/csrf-exploit.blade.php
index 2408bd4..53371b1 100644
--- a/resources/views/hacker/csrf-exploit.blade.php
+++ b/resources/views/hacker/csrf-exploit.blade.php
@@ -3,7 +3,7 @@
شما برنده شدید!
-
+
diff --git a/resources/views/hacker/fake-login.blade.php b/resources/views/hacker/fake-login.blade.php
new file mode 100644
index 0000000..024046d
--- /dev/null
+++ b/resources/views/hacker/fake-login.blade.php
@@ -0,0 +1,27 @@
+
+
+
+
+
+
Session Expired - Please Login
+
+
+
+
+
Session Expired
+
Please log in again to continue.
+
+
Notice: URL is hackerapp.eitebar.ir!
+
+
+
\ No newline at end of file
diff --git a/resources/views/hacker/tabnab.blade.php b/resources/views/hacker/tabnab.blade.php
new file mode 100644
index 0000000..59069cd
--- /dev/null
+++ b/resources/views/hacker/tabnab.blade.php
@@ -0,0 +1,19 @@
+
+
+
+
Partner Site
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/resources/views/user/login.blade.php b/resources/views/user/login.blade.php
index 5dda839..c018eda 100644
--- a/resources/views/user/login.blade.php
+++ b/resources/views/user/login.blade.php
@@ -6,7 +6,7 @@
ورود به حساب | WebApp Victim
-
+
diff --git a/resources/views/user/partners.blade.php b/resources/views/user/partners.blade.php
new file mode 100644
index 0000000..fb78213
--- /dev/null
+++ b/resources/views/user/partners.blade.php
@@ -0,0 +1,19 @@
+
+
+
+
+
+
Our Partners
+
+
+
+
+
Our External Partners
+
Click the links below to visit our partners. Notice the tab behavior.
+
+
+
+
\ No newline at end of file
diff --git a/resources/views/user/profile.blade.php b/resources/views/user/profile.blade.php
index 30d3c41..63c036c 100644
--- a/resources/views/user/profile.blade.php
+++ b/resources/views/user/profile.blade.php
@@ -5,7 +5,7 @@
داشبورد کاربری | WebApp Victim
-
+
diff --git a/resources/views/vulnerabilities/logs.blade.php b/resources/views/vulnerabilities/logs.blade.php
index 9751188..ef4bd32 100644
--- a/resources/views/vulnerabilities/logs.blade.php
+++ b/resources/views/vulnerabilities/logs.blade.php
@@ -5,7 +5,7 @@
Hacker Panel - C2 Server
-
+
diff --git a/resources/views/vulnerabilities/xss.blade.php b/resources/views/vulnerabilities/xss.blade.php
index 0cdb4cb..5759e11 100644
--- a/resources/views/vulnerabilities/xss.blade.php
+++ b/resources/views/vulnerabilities/xss.blade.php
@@ -6,7 +6,7 @@
آزمایشگاه XSS | Browser Security
-
+
diff --git a/routes/web.php b/routes/web.php
index 0263bd7..c4ff173 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -51,6 +51,14 @@
return view('hacker.clipboard');
})->name('hacker.clipboard');
+ // Tabnabbing Exploit Pages
+ Route::get('/tabnab', function () {
+ return view('hacker.tabnab');
+ })->name('hacker.tabnab');
+ Route::get('/fake-login', function () {
+ return view('hacker.fake-login');
+ })->name('hacker.fake-login');
+
});
/*
@@ -83,6 +91,11 @@
Route::post('/login', [UserController::class, 'login'])->name('login.submit');
Route::get('/logout', [UserController::class, 'logout'])->name('logout');
+ // External Partners (Vulnerable Tabnabbing page)
+ Route::get('/partners', function () {
+ return view('user.partners');
+ })->name('user.partners');
+
// ----- بخشهای محافظت شده با سشن -----
Route::middleware(['web', 'auth'])->group(function () {