enddo Posted February 18, 2016 Report Share Posted February 18, 2016 CJExploiter CJExploiter is drag and drop ClickJacking exploit development assistance tool. First open the "index.html" with your browser locally and enter target URL and click on "View Site". You can dynamically create your own inputs. Finally by click the "Exploit It" you can see the P0C. Feel free to make pull requests, if there's anything you feel we could do better. Summery Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the top level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both. Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they are typing in the password to their email or bank account, but are instead typing into an invisible frame controlled by the attacker. OWASP You can use this tool to generate dynamic P0C. 3 Quote Link to comment Share on other sites More sharing options...
carartem05 Posted February 18, 2016 Report Share Posted February 18, 2016 (edited) I will test Edited February 18, 2016 by carartem05 Quote Link to comment Share on other sites More sharing options...
mumtaz_gohar Posted March 18, 2016 Report Share Posted March 18, 2016 is good? Quote Link to comment Share on other sites More sharing options...
mamine007 Posted November 5, 2016 Report Share Posted November 5, 2016 On 18/02/2016 at 6:11 PM, enddo said: CJExploiter wher is the link to download Quote Link to comment Share on other sites More sharing options...
Technetium Posted November 5, 2016 Report Share Posted November 5, 2016 2 hours ago, mamine007 said: wher is the link to download here: https://github.com/enddo/CJExploiter Quote Link to comment Share on other sites More sharing options...
mamine007 Posted April 30, 2017 Report Share Posted April 30, 2017 how to use this program Quote Link to comment Share on other sites More sharing options...
Turry Posted April 30, 2017 Report Share Posted April 30, 2017 4 hours ago, mamine007 said: how to use this program CJExploiter is drag and drop ClickJacking exploit development assistance tool. First open the "index.html" with your browser locally and enter target URL and click on "View Site". You can dynamically create your own inputs. Finally by click the "Exploit It" you can see the P0C. Quote Link to comment Share on other sites More sharing options...
