From 0b263517b77d2ea18357e4b51279721e496841ba Mon Sep 17 00:00:00 2001 From: mcoder Date: Fri, 17 Apr 2026 15:17:04 +0330 Subject: [PATCH] Add --- resources/views/hacker/clipboard.blade.php | 2 +- resources/views/hacker/csrf-exploit.blade.php | 2 +- resources/views/hacker/fake-login.blade.php | 27 +++++++++++++++++++ resources/views/hacker/tabnab.blade.php | 19 +++++++++++++ resources/views/user/login.blade.php | 2 +- resources/views/user/partners.blade.php | 19 +++++++++++++ resources/views/user/profile.blade.php | 2 +- .../views/vulnerabilities/logs.blade.php | 2 +- resources/views/vulnerabilities/xss.blade.php | 2 +- routes/web.php | 13 +++++++++ 10 files changed, 84 insertions(+), 6 deletions(-) create mode 100644 resources/views/hacker/fake-login.blade.php create mode 100644 resources/views/hacker/tabnab.blade.php create mode 100644 resources/views/user/partners.blade.php diff --git a/resources/views/hacker/clipboard.blade.php b/resources/views/hacker/clipboard.blade.php index 529c2e4..4877aa9 100644 --- a/resources/views/hacker/clipboard.blade.php +++ b/resources/views/hacker/clipboard.blade.php @@ -4,7 +4,7 @@ Promo Code Verification - +
diff --git a/resources/views/hacker/csrf-exploit.blade.php b/resources/views/hacker/csrf-exploit.blade.php index 2408bd4..53371b1 100644 --- a/resources/views/hacker/csrf-exploit.blade.php +++ b/resources/views/hacker/csrf-exploit.blade.php @@ -3,7 +3,7 @@ شما برنده شدید! - + diff --git a/resources/views/hacker/fake-login.blade.php b/resources/views/hacker/fake-login.blade.php new file mode 100644 index 0000000..024046d --- /dev/null +++ b/resources/views/hacker/fake-login.blade.php @@ -0,0 +1,27 @@ + + + + + + Session Expired - Please Login + + + +
+

Session Expired

+

Please log in again to continue.

+
+
+ + +
+
+ + +
+ +
+

Notice: URL is hackerapp.eitebar.ir!

+
+ + \ No newline at end of file diff --git a/resources/views/hacker/tabnab.blade.php b/resources/views/hacker/tabnab.blade.php new file mode 100644 index 0000000..59069cd --- /dev/null +++ b/resources/views/hacker/tabnab.blade.php @@ -0,0 +1,19 @@ + + + + Partner Site + + + +
+ +
+ + \ No newline at end of file diff --git a/resources/views/user/login.blade.php b/resources/views/user/login.blade.php index 5dda839..c018eda 100644 --- a/resources/views/user/login.blade.php +++ b/resources/views/user/login.blade.php @@ -6,7 +6,7 @@ ورود به حساب | WebApp Victim - + diff --git a/resources/views/user/partners.blade.php b/resources/views/user/partners.blade.php new file mode 100644 index 0000000..fb78213 --- /dev/null +++ b/resources/views/user/partners.blade.php @@ -0,0 +1,19 @@ + + + + + + Our Partners + + + +
+

Our External Partners

+

Click the links below to visit our partners. Notice the tab behavior.

+ +
+ + \ No newline at end of file diff --git a/resources/views/user/profile.blade.php b/resources/views/user/profile.blade.php index 30d3c41..63c036c 100644 --- a/resources/views/user/profile.blade.php +++ b/resources/views/user/profile.blade.php @@ -5,7 +5,7 @@ داشبورد کاربری | WebApp Victim - + diff --git a/resources/views/vulnerabilities/logs.blade.php b/resources/views/vulnerabilities/logs.blade.php index 9751188..ef4bd32 100644 --- a/resources/views/vulnerabilities/logs.blade.php +++ b/resources/views/vulnerabilities/logs.blade.php @@ -5,7 +5,7 @@ Hacker Panel - C2 Server - +
diff --git a/resources/views/vulnerabilities/xss.blade.php b/resources/views/vulnerabilities/xss.blade.php index 0cdb4cb..5759e11 100644 --- a/resources/views/vulnerabilities/xss.blade.php +++ b/resources/views/vulnerabilities/xss.blade.php @@ -6,7 +6,7 @@ آزمایشگاه XSS | Browser Security - + diff --git a/routes/web.php b/routes/web.php index 0263bd7..c4ff173 100644 --- a/routes/web.php +++ b/routes/web.php @@ -51,6 +51,14 @@ return view('hacker.clipboard'); })->name('hacker.clipboard'); + // Tabnabbing Exploit Pages + Route::get('/tabnab', function () { + return view('hacker.tabnab'); + })->name('hacker.tabnab'); + Route::get('/fake-login', function () { + return view('hacker.fake-login'); + })->name('hacker.fake-login'); + }); /* @@ -83,6 +91,11 @@ Route::post('/login', [UserController::class, 'login'])->name('login.submit'); Route::get('/logout', [UserController::class, 'logout'])->name('logout'); + // External Partners (Vulnerable Tabnabbing page) + Route::get('/partners', function () { + return view('user.partners'); + })->name('user.partners'); + // ----- بخش‌های محافظت شده با سشن ----- Route::middleware(['web', 'auth'])->group(function () {