1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Windows 10 Popup Notifications Off Websites

Discussion in 'BlackHat Lounge' started by mickyfu, Jun 27, 2017.

  1. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    7,512
    Likes Received:
    21,474
    Occupation:
    King Of Crypto C
    Location:
    Solihull Young Offenders
    I constantly get popup notifications from a website in my niche on Windows 10 notification tray. How is this done, the only thing I can think of is a clickjack from a popup on their site.
     
    • Thanks Thanks x 2
  2. Jiung

    Jiung Jr. VIP Jr. VIP

    Joined:
    Jan 27, 2015
    Messages:
    2,163
    Likes Received:
    1,116
    Gender:
    Male
    Occupation:
    Living the IM Dream
    Location:
    California
    Yeah, the p0rn niche seems to do that more often than other niches.
     
  3. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    7,512
    Likes Received:
    21,474
    Occupation:
    King Of Crypto C
    Location:
    Solihull Young Offenders
    I bet that's a fucker if you are a secret porn enthusiast. Going back to the site that comes up on my laptop (gambling), it has a popup. I can only assume it is a clickjack, but I can't find such plugin / script to do this.
     
  4. SEO

    SEO Jr. VIP Jr. VIP

    Joined:
    Jan 6, 2017
    Messages:
    865
    Likes Received:
    649
    Are they possibly chrome push notifications?
     
  5. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    7,512
    Likes Received:
    21,474
    Occupation:
    King Of Crypto C
    Location:
    Solihull Young Offenders
    No matter what they are, I never asked for them to be there. When you click on the notifications it has a list of websites to show notifications ie Gmail. This site is also in this list. The only way it could have got there is via clickjack, in my opinion. I was just looking for a similar script.
     
  6. living2xl

    living2xl Jr. VIP Jr. VIP

    Joined:
    Dec 9, 2011
    Messages:
    1,737
    Likes Received:
    416
    Occupation:
    Sippin dat juice - Shout it louder!
    Location:
    Not sleeping!
    Home Page:
    +1 if anyone knows someone who has such a script ready made let me know
     
  7. bartosimpsonio

    bartosimpsonio Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 21, 2013
    Messages:
    12,748
    Likes Received:
    11,413
    Occupation:
    COINZ
    Location:
    BUYAH
    Home Page:
    They're push notifications. You can disable them on the advanced options, same place where you disable your location sharing.

    Also: I was testing something with Chrome and it got infected with some weird adware on a Mac. I've been trying to find out what it is for days, because science, and no success.

    There's more black hat happening out there than what meets the eye.
     
  8. TiagoS

    TiagoS Jr. VIP Jr. VIP

    Joined:
    Jul 5, 2014
    Messages:
    346
    Likes Received:
    175
    It's push notifications. It's probably some adware that automatically added their domain to your browser whitelisted URLs.
     
  9. I know SEO

    I know SEO Marketplace Mod Moderator

    Joined:
    Nov 29, 2012
    Messages:
    16,534
    Likes Received:
    6,184
    Push notifications, I can't imagine how you could clickjack that as the pop up is generated by the browser... could you have accidentally clicked allow on a pop up?

    There are WP pluggins for this if you want to add it
    https://en-gb.wordpress.org/plugins/push-notifications-for-wp/

    (I've not used that one)
     
  10. bonerlicious

    bonerlicious BANNED BANNED

    Joined:
    Apr 12, 2017
    Messages:
    60
    Likes Received:
    84
    Gender:
    Male
    They are push notifications but something interesting that I didn't know you could do is edit the way the notification look like. RadarOnline has the popup edited and replaces the standard one that asks permission. So I suppose some sites could change the way that they look so that you give them permission and think that you haven't.
     
  11. Gogol

    Gogol Jr. VIP Jr. VIP

    Joined:
    Sep 10, 2010
    Messages:
    3,478
    Likes Received:
    3,108
    Gender:
    Male
    Easy peasy with JS
    Code:
    https://stackoverflow.com/questions/2271156/chrome-desktop-notification-example
    The user has to accept that he/she will receive the notifications, and only chrome supports it.

    oh btw, I highly doubt that click jacking is possible for this as the notification object is outside the document and you trigger an event ( or can you?) AFAIK.