iframe sandbox about muraena HOT 4 CLOSED

Why don't you try to remove the sandbox attribute?

from muraena.

It does not work. I think it's because recaptcha__en.js (https://www.gstatic.com/recaptcha/api2/v1565591531251/recaptcha__en.js) has a function which reads the url from the address bar. It's an invisible recaptcha which shows after 5th wrong input attempt. Search for window.location inside recaptcha__en.js. It's the third occurrence. I've tried multiple solutions like replacing the "co" parameter value with the original one using javascript injection. Because "co" is basically "https://www.target.com:443" in base64. I've also tried to download and replace the "window.location.href" with the target website. None worked. I wonder how can I trick this one to think as I am on the real website. Any thoughts?

from muraena.

Did you enable the base64 option in the config?

"transform": {
 "base64": {
 "enabled": true,
 "padding": [
 "=",
 "."
 ]
 },

from muraena.

Yes, base64 option is enabled.

from muraena.