Looking at a webpage and seeking for a particular element

Applying eValid to AJAX applications that require advanced DOM-based methods.

Looking at a webpage and seeking for a particular element

Postby WilliamH » Thu Aug 21, 2014 11:32 am

Hey all.

I want to see if a particular page has some elements that provide for clickjacking?

That is, spots on the page where if I click then I activate something that is obscured?

Can eValid do this?

Thanks
WilliamH
 
Posts: 1
Joined: Thu Aug 21, 2014 11:24 am

Re: Looking at a webpage and seeking for a particular elemen

Postby eValid » Wed Aug 27, 2014 9:11 am

WilliamH wrote:Hey all.

I want to see if a particular page has some elements that provide for clickjacking?

That is, spots on the page where if I click then I activate something that is obscured?

Can eValid do this?

Thanks


Morning WillimaH. Thanks for posting.

That's a good one! Not often we get a suggesion for a really NEW applcation of eValid.

Basically, you want to look in DOM in the page for any element that is sensitive to a click and which contains some obscured action of some kind. In JavaScript (how else can you take an obscured action.).

You do have to have something specific in mind for what such clickjacking JavaScript might look like, and then you simply do a sequence IndexFindElementEx commands to look for instances of that pattern. You might run 100 of these
searches (which will be slow) or you might for 1000 of them, depending on how big the page is.

If you hit something -- one of your propsed patterns matches something on the page -- they you're home free: you found an instance of a clickjacking passage.

-- eValid Support
eValid
 
Posts: 2034
Joined: Tue Jan 01, 2008 12:48 pm
Location: USA


Return to AJAX Applications & DOM Processing

Design Downloaded from free phpBB templates | free website templates | Free Web Buttons