Skip to content

Instantly share code, notes, and snippets.

View joshfraser's full-sized avatar
😜
sup?

Josh Fraser joshfraser

😜
sup?
View GitHub Profile
@joshfraser
joshfraser / gist:819308dbae43ff70d892
Created June 6, 2014 21:43
clickjacking POC for amazon.com
<html>
<title>Click-jacking on Amazon.com</title>
<head>
<style type="text/css">
body {
background-color: #fafafa;
}
a {
color:rgb(228, 121, 17);
Service ( VinGatewayService ) tns="http://service.vingate.ais.experian.com/"
Prefixes (1)
ns0 = "http://service.vingate.ais.experian.com/"
Ports (1):
(VinGatewayPort)
Methods (6):
checkStatus()
checkVolume()
getPlate(xs:string id, xs:string password, xs:string quoteback, xs:string dppaUseCode, xs:string dppaSubCategoryCode, xs:string subCustomerId, xs:string processType, xs:string vin, )
getVin(xs:string id, xs:string password, xs:string quoteback, xs:string dppaUseCode, xs:string dppaSubCategoryCode, xs:string subCustomerId, xs:string processType, xs:string plateNumber, xs:string plateState, )

Keybase proof

I hereby claim:

  • I am joshfraser on github.
  • I am joshfraser (https://keybase.io/joshfraser) on keybase.
  • I have a public key whose fingerprint is 3D7A 9DF9 A306 4E03 BA58 4962 9988 36C3 1CAC 4619

To claim this, I am signing this object: