1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Windows 10 Popup Notifications Off Websites

Discussion in 'BlackHat Lounge' started by mickyfu, Jun 27, 2017.

  1. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    6,855
    Likes Received:
    19,711
    Location:
    Solihull Young Offenders
    I constantly get popup notifications from a website in my niche on Windows 10 notification tray. How is this done, the only thing I can think of is a clickjack from a popup on their site.
     
    • Thanks Thanks x 2
  2. jiungsong

    jiungsong Jr. VIP Jr. VIP

    Joined:
    Jan 27, 2015
    Messages:
    1,600
    Likes Received:
    761
    Gender:
    Male
    Occupation:
    Living the IM Dream
    Location:
    California
    Yeah, the p0rn niche seems to do that more often than other niches.
     
  3. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    6,855
    Likes Received:
    19,711
    Location:
    Solihull Young Offenders
    I bet that's a fucker if you are a secret porn enthusiast. Going back to the site that comes up on my laptop (gambling), it has a popup. I can only assume it is a clickjack, but I can't find such plugin / script to do this.
     
  4. SEO

    SEO Jr. VIP Jr. VIP

    Joined:
    Jan 6, 2017
    Messages:
    760
    Likes Received:
    565
    Are they possibly chrome push notifications?
     
  5. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    6,855
    Likes Received:
    19,711
    Location:
    Solihull Young Offenders
    No matter what they are, I never asked for them to be there. When you click on the notifications it has a list of websites to show notifications ie Gmail. This site is also in this list. The only way it could have got there is via clickjack, in my opinion. I was just looking for a similar script.
     
  6. living2xl

    living2xl Jr. VIP Jr. VIP

    Joined:
    Dec 9, 2011
    Messages:
    1,595
    Likes Received:
    306
    Occupation:
    Sippin dat juice - Shout it louder!
    Location:
    Not sleeping!
    Home Page:
    +1 if anyone knows someone who has such a script ready made let me know
     
  7. bartosimpsonio

    bartosimpsonio Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 21, 2013
    Messages:
    12,041
    Likes Received:
    10,830
    Occupation:
    WHEREZ MA
    Location:
    BITCOINS AT?
    Home Page:
    They're push notifications. You can disable them on the advanced options, same place where you disable your location sharing.

    Also: I was testing something with Chrome and it got infected with some weird adware on a Mac. I've been trying to find out what it is for days, because science, and no success.

    There's more black hat happening out there than what meets the eye.
     
  8. TiagoS

    TiagoS Jr. VIP Jr. VIP

    Joined:
    Jul 5, 2014
    Messages:
    310
    Likes Received:
    144
    It's push notifications. It's probably some adware that automatically added their domain to your browser whitelisted URLs.
     
  9. I know SEO

    I know SEO Marketplace Mod Moderator

    Joined:
    Nov 29, 2012
    Messages:
    15,721
    Likes Received:
    6,106
    Push notifications, I can't imagine how you could clickjack that as the pop up is generated by the browser... could you have accidentally clicked allow on a pop up?

    There are WP pluggins for this if you want to add it
    https://en-gb.wordpress.org/plugins/push-notifications-for-wp/

    (I've not used that one)
     
  10. bonerlicious

    bonerlicious BANNED BANNED

    Joined:
    Apr 12, 2017
    Messages:
    60
    Likes Received:
    84
    Gender:
    Male
    They are push notifications but something interesting that I didn't know you could do is edit the way the notification look like. RadarOnline has the popup edited and replaces the standard one that asks permission. So I suppose some sites could change the way that they look so that you give them permission and think that you haven't.
     
  11. Gogol

    Gogol Jr. VIP Jr. VIP

    Joined:
    Sep 10, 2010
    Messages:
    3,409
    Likes Received:
    3,057
    Gender:
    Male
    Easy peasy with JS
    Code:
    https://stackoverflow.com/questions/2271156/chrome-desktop-notification-example
    The user has to accept that he/she will receive the notifications, and only chrome supports it.

    oh btw, I highly doubt that click jacking is possible for this as the notification object is outside the document and you trigger an event ( or can you?) AFAIK.