Re:Facebook Bug Bounties – Unofficial Treasure Map
by update on Saturday June 11, 2016 @06:27PM
(#11885647)
> Today it wouldn't work because they now have frame-breaking
Yeah. I just want to see what the original vulnerability looked like.
I bug hunt.
Thanks for the offer to email you, but, I'm transitioning away from E-Mail for security reasons.
Basically, you position the iframe element over something that will be clicked (such as an advertisement X button), set its z-index so that it is the topmost element, and set its opacity to 0. You can even test to see when the click has occurred by testing for when a certain element on your page has lost the focus.