And I still haven't been able to get anything working the way I'd like it to, but since I don't have much time these days I thought I'd throw this out there to see if anyone could figure something out. What I'm trying here is to be able to execute XSS attacks within iframes against sites which break out of iframes at the top of each page, but sadly I'm having almost no real success.
Using the idea that I used to implement this; http://kuza55.blogspot.com/2007/03/trapping-mozilla-for-phishing.html, it is possible to stop site breaking out of frames.
Using the following code:
<html>
<body>
<script>
function test(e) {
window.setTimeout ("stop();", 1);
}
window.onbeforeunload = test;
</script>
<iframe src="http://hackthissite.org/" />
</body>
</html>But while it is possible to stop http://hackthissite.org from breaking out of an iframe, the moment we call the stop(); function, the iframe also stops loading. So any XSS attacks after the frame breaking code will not be executed.
So as you can see I haven't been able to figure anything out which will stop the top window being changed, but not stop the iframe being loaded. Hopefully someone else will have more luck.
3 comments:
try using security=restricted in your iframe.
note: this does not work in mozilla, only IE.
from
http://www.webappsec.org/lists/websecurity/archive/2005-12/msg00005.html and http://crypto.stanford.edu/framebust/
Awesome! Thanks heaps Anonymous!
It also seems that this works in IE7 as well, which is cool.
Again - thanks, :)
As mentioned, works great for IE. Anyone know a solution for firefox?
Post a Comment