Skip to content

README.md

Latest commit

 

History

History
23 lines (14 loc) · 1007 Bytes

README.md

File metadata and controls

23 lines (14 loc) · 1007 Bytes

Clickjacking Vulnerability Analysis - profile.cex.io

If this research helped you, please consider giving it a ⭐ Star.

🚀 Stay Updated

Found this research useful?

  • Star ⭐ this repo to keep track of it.
  • Follow me on GitHub for more DeFi security research.
  • Fork it if you want to run your own experiments.

☕ Support the Research

If you appreciate the work and want to support further security research:

Donate QR

Wallet Address (ETH/EVM): 0xBDDD7973D0DE27B715A4A5cbdb87d0DF78757b3A

This repository contains a Proof of Concept (PoC) for a Clickjacking vulnerability identified on profile.cex.io due to missing X-Frame-Options and Content-Security-Policy (frame-ancestors) headers.

Impact

An attacker can embed the financial profile page into a malicious website and trick the user into performing unintended actions (e.g., changing security settings, modifying personal info) by overlaying deceptive UI elements.