Step 1 - Find the exact coordinates using the following code.

document.addEventListener('mousemove', function(e) { let coords = document.getElementById('coords'); if (!coords) { coords = document.createElement('div'); coords.id = 'coords'; coords.style.position = 'fixed'; coords.style.backgroundColor = 'rgba(0,0,0,0.7)'; coords.style.color = 'white'; coords.style.padding = '5px'; coords.style.borderRadius = '3px'; coords.style.zIndex = '1000'; document.body.appendChild(coords); } coords.style.left = (e.clientX + 10) + 'px'; coords.style.top = (e.clientY + 10) + 'px'; coords.innerHTML = `x: ${e.clientX}, y: ${e.clientY}`; });

Step 2 - Fiill the form Vulnerable Secure

URL Top Left Width Height Generate URL

Step 3 - Open the URL

References

• Secure page
• Exploit tool
• Vulnerable page
• Sadly trying to frame the page old way
• Paulos Yibelo's post about DoubleClickJacking
• Top 10 web hacking techniques of 2024 by James Kettle