From adeb5cf02c0681caa4edb06cd0c647e38f64b6f6 Mon Sep 17 00:00:00 2001 From: mcoder Date: Wed, 15 Apr 2026 12:36:29 +0330 Subject: [PATCH] Add --- config/session.php | 2 +- docker/nginx/default.conf | 2 +- .../hacker/samesite-clickjacking.blade.php | 26 +++++++++++++++++++ routes/web.php | 11 ++++++++ 4 files changed, 39 insertions(+), 2 deletions(-) create mode 100644 resources/views/hacker/samesite-clickjacking.blade.php diff --git a/config/session.php b/config/session.php index a0c9f76..c3494b5 100644 --- a/config/session.php +++ b/config/session.php @@ -199,7 +199,7 @@ | */ - 'same_site' => 'none', + 'same_site' => env('SESSION_SAME_SITE', 'lax'), /* |-------------------------------------------------------------------------- diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf index c2e24aa..e3701c4 100644 --- a/docker/nginx/default.conf +++ b/docker/nginx/default.conf @@ -1,6 +1,6 @@ server { listen 80; - server_name webapp.kr-rezvan.ir; + server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir; root /var/www/html/public; index index.php; diff --git a/resources/views/hacker/samesite-clickjacking.blade.php b/resources/views/hacker/samesite-clickjacking.blade.php new file mode 100644 index 0000000..48f18f2 --- /dev/null +++ b/resources/views/hacker/samesite-clickjacking.blade.php @@ -0,0 +1,26 @@ + + + + + + Read our new Blog Post! + + + +

Check out our latest article!

+
+ + +
+ + \ No newline at end of file diff --git a/routes/web.php b/routes/web.php index 1f31684..7d1bf74 100644 --- a/routes/web.php +++ b/routes/web.php @@ -34,6 +34,17 @@ }); +/* +|-------------------------------------------------------------------------- +| compromised subdomain (blog.webapp.kr-rezvan.ir) +|-------------------------------------------------------------------------- +*/ +Route::domain('blog.webapp.kr-rezvan.ir')->group(function () { + Route::get('/clickjacking', function () { + return view('hacker.samesite-clickjacking'); + })->name('samesite.clickjacking'); +}); + /* |-------------------------------------------------------------------------- | 🛡️ دامنه قربانی (Victim App) : webapp.kr-rezvan.ir