Monday, February 1, 2016

Clickjacking


On Clickjacked page the attacker load another page over it. The user think that they clicking visible button while they are actually performing actions on the hidden invisible page.

Clickjacking is known as "UI Redress Attack" , here attacker is hijacking user click for their page and routing them another page.

Example:
  • Tricking users into making their social networking profile information public
  • Making users follow someone on Twitter
  • Sharing links on Facebook
  • Getting likes on Facebook fan page
  • Making illegal revenue from Google Adsense program

More practical example is when user going to play  movie after clicking on play button then sometime it redirect user in another link this is clickjacking.

No comments:

Post a Comment