Framed Preferences
WorkPort allows its account preferences page to be embedded by any website. A rewards site visually disguises the real Save button beneath an attractive offer.
Objective
Use the external page to cause the framed WorkPort preferences action to be clicked and recover the proof from the victim interface.