08-02-2016, 07:04 AM
Is there a plugin or script that would allow me to either add a form to an iframe, or capture the information the user enters in if the iframe features a form?
08-02-2016, 07:04 AM
08-02-2016, 11:00 PM
Really vauge question for (what could be) a fairly complex goal. Do you own the page? If not, who does? Do you have any control over content? Do you have any way to contact whatever victim (i suppose that's the word?) or sway a site visitors actions?
First thing that comes to mind is click-jacking, but not in the contemporary form. Layer a translucent form over the real form (javascript could handle this no problem), user fills it out and bam, all yours. Could even have the javascript pass the values to the real form, making it look legit. Unsuspecting victims are always the best right (lol)?
Second, Cross-Frame Scripting (XFS) - Basically tricking a user into clicking a link you've made that, using javascript (again), could load an invisible frame from the page the user was on - the link must be clicked from the originating domain, or XFS won't work due to standard browser protections not allowing java loaded from a different source being allowed to intercept/interact with data from the originating page.
Give me more details if you still are trying to figure this out, you've caught my attention :D
First thing that comes to mind is click-jacking, but not in the contemporary form. Layer a translucent form over the real form (javascript could handle this no problem), user fills it out and bam, all yours. Could even have the javascript pass the values to the real form, making it look legit. Unsuspecting victims are always the best right (lol)?
Second, Cross-Frame Scripting (XFS) - Basically tricking a user into clicking a link you've made that, using javascript (again), could load an invisible frame from the page the user was on - the link must be clicked from the originating domain, or XFS won't work due to standard browser protections not allowing java loaded from a different source being allowed to intercept/interact with data from the originating page.
Give me more details if you still are trying to figure this out, you've caught my attention :D
08-06-2016, 12:14 PM
What I'm thinking of doing is putting an iframe of gmetrix.com or a similar website where visitors can check their page speed.
Since I would be sending traffic there I would like to capture their URL.
Since I would be sending traffic there I would like to capture their URL.