diff --git a/resources/views/hacker/clickjacking.blade.php b/resources/views/hacker/clickjacking.blade.php index 07c2c4c..2dd7278 100644 --- a/resources/views/hacker/clickjacking.blade.php +++ b/resources/views/hacker/clickjacking.blade.php @@ -72,5 +72,8 @@ class="malicious-iframe" 2. Adjust the CSS top and left of the `.bait-button` so it sits perfectly underneath the "Update Email" or "Delete Account" button inside the iframe.
3. Change opacity: 0.4; to opacity: 0; to finalize the attack. + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/clipboard.blade.php b/resources/views/hacker/clipboard.blade.php index 4877aa9..cf27553 100644 --- a/resources/views/hacker/clipboard.blade.php +++ b/resources/views/hacker/clipboard.blade.php @@ -52,5 +52,8 @@ } }); + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/cors.blade.php b/resources/views/hacker/cors.blade.php index 6a0de8b..af4db61 100644 --- a/resources/views/hacker/cors.blade.php +++ b/resources/views/hacker/cors.blade.php @@ -101,5 +101,8 @@ } }); + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/csrf-exploit.blade.php b/resources/views/hacker/csrf-exploit.blade.php index 53371b1..094cfe6 100644 --- a/resources/views/hacker/csrf-exploit.blade.php +++ b/resources/views/hacker/csrf-exploit.blade.php @@ -19,5 +19,8 @@ + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/drive-by.blade.php b/resources/views/hacker/drive-by.blade.php index 524897d..70f2bdd 100644 --- a/resources/views/hacker/drive-by.blade.php +++ b/resources/views/hacker/drive-by.blade.php @@ -61,5 +61,8 @@ } }); + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/fake-login.blade.php b/resources/views/hacker/fake-login.blade.php index 024046d..cbbea55 100644 --- a/resources/views/hacker/fake-login.blade.php +++ b/resources/views/hacker/fake-login.blade.php @@ -23,5 +23,8 @@

Notice: URL is hackerapp.eitebar.ir!

+ + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/samesite-clickjacking.blade.php b/resources/views/hacker/samesite-clickjacking.blade.php index 2093a41..128b1a5 100644 --- a/resources/views/hacker/samesite-clickjacking.blade.php +++ b/resources/views/hacker/samesite-clickjacking.blade.php @@ -42,5 +42,8 @@ + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/hacker/tabnab.blade.php b/resources/views/hacker/tabnab.blade.php index 59069cd..9250dd3 100644 --- a/resources/views/hacker/tabnab.blade.php +++ b/resources/views/hacker/tabnab.blade.php @@ -15,5 +15,8 @@ } + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/user/lab-directory.blade.php b/resources/views/user/lab-directory.blade.php new file mode 100644 index 0000000..fc35afd --- /dev/null +++ b/resources/views/user/lab-directory.blade.php @@ -0,0 +1,105 @@ + + + + + + Browser Security Lab Directory + + + + +
+
+

Browser Security Lab

+

An interactive training ground to explore modern web vulnerabilities.

+
+ +
+ +
+
+

XSS Lab

+

Test Reflected XSS and Content Security Policy (CSP) bypass techniques.

+ Launch Lab +
+
+ + +
+
+

CSRF Attack

+

Demonstrate a classic Cross-Site Request Forgery attack using a hidden form.

+ Launch Lab +
+
+ + +
+
+

Session Stealer Logs

+

View the C2 server logs to see if any cookies or data have been exfiltrated.

+ Launch Lab +
+
+ + +
+
+

MitB Simulation

+

Simulate a Man-in-the-Browser attack by injecting JS into the login page via DevTools.

+ Launch Lab +
+
+ + +
+
+

Clickjacking

+

Bypass SameSite=Lax cookie protection using a compromised but same-site subdomain.

+ Launch Lab +
+
+ + +
+
+

Drive-by Download

+

Test how browsers handle automatic downloads initiated from a cross-origin iframe.

+ Launch Lab +
+
+ + +
+
+

Clipboard Data Leak

+

Explore browser permissions and user gestures required for clipboard access.

+ Launch Lab +
+
+ + +
+
+

Reverse Tabnabbing

+

Exploit `window.opener` to perform a phishing attack on the previous tab.

+ Launch Lab +
+
+ + +
+
+

CORS & Opaque Responses

+

Test how browsers block cross-origin data reads and handle 'no-cors' requests.

+ Launch Lab +
+
+
+
+ + \ No newline at end of file diff --git a/resources/views/user/login.blade.php b/resources/views/user/login.blade.php index c018eda..fb04833 100644 --- a/resources/views/user/login.blade.php +++ b/resources/views/user/login.blade.php @@ -55,6 +55,8 @@ class="w-full px-4 py-3 border border-slate-300 rounded-lg focus:ring-2 focus:ri کلیک کنید - + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/user/partners.blade.php b/resources/views/user/partners.blade.php index 1a065ca..be6f4d5 100644 --- a/resources/views/user/partners.blade.php +++ b/resources/views/user/partners.blade.php @@ -15,5 +15,8 @@
  • 2. Partner Link (Vulnerable - Explicit Opener)
  • + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/user/profile.blade.php b/resources/views/user/profile.blade.php index 63c036c..cb0ef18 100644 --- a/resources/views/user/profile.blade.php +++ b/resources/views/user/profile.blade.php @@ -72,5 +72,8 @@ + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/vulnerabilities/logs.blade.php b/resources/views/vulnerabilities/logs.blade.php index ef4bd32..9a385d1 100644 --- a/resources/views/vulnerabilities/logs.blade.php +++ b/resources/views/vulnerabilities/logs.blade.php @@ -47,5 +47,8 @@ + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/resources/views/vulnerabilities/xss.blade.php b/resources/views/vulnerabilities/xss.blade.php index 5759e11..26556db 100644 --- a/resources/views/vulnerabilities/xss.blade.php +++ b/resources/views/vulnerabilities/xss.blade.php @@ -66,5 +66,8 @@ class="w-full bg-slate-950 text-green-400 border border-slate-600 rounded-xl p-4 + + 🏠 Back to Lab Directory + \ No newline at end of file diff --git a/routes/web.php b/routes/web.php index 44050a7..2df0b9a 100644 --- a/routes/web.php +++ b/routes/web.php @@ -110,6 +110,11 @@ ]); })->name('user.api.secret'); + // Central Lab Directory Route + Route::get('/labs', function () { + return view('user.lab-directory'); + })->name('user.labs'); + // ----- بخش‌های محافظت شده با سشن ----- Route::middleware(['web', 'auth'])->group(function () {