Burp Suite User Forum

Create new post

Clickjacking with buster script bypass

Matej | Last updated: Oct 08, 2019 07:48AM UTC

Following lab is bugged: https://portswigger.net/web-security/clickjacking/lab-frame-buster-script Robot-victim does not click exploit iframe, even if it was copied and set correctly (I was using Google Chrome as advised). Therefore this lab cannot be completed. Moreover I noticed, if I will use `<button>Click me</button>` instead of `<div>Click me</div>`, robot-victim is not capable to click on that, and therefore to finish all clickjacking Labs.

Ben, PortSwigger Agent | Last updated: Oct 08, 2019 09:24AM UTC

Hi Matej, Thank you for your message. We have automated tests running several times a day which will test that the labs are working correctly. I have also been through the Frame Busting Script lab this morning and have been able to successfully solve it using the steps outlined in the lab solution. Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.