CJExploiter

[enddo]

CJExploiter

CJExploiter is drag and drop ClickJacking exploit development assistance tool. First open the "index.html" with your browser locally and enter target URL and click on "View Site". You can dynamically create your own inputs. Finally by click the "Exploit It" you can see the P0C.

Feel free to make pull requests, if there's anything you feel we could do better.

Summery

Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the top level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both.

Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they are typing in the password to their email or bank account, but are instead typing into an invisible frame controlled by the attacker. OWASP

You can use this tool to generate dynamic P0C.

[carartem05]

I will test

Edited February 18, 2016 by carartem05

[mumtaz_gohar]

is good?

[mamine007]

On 18/02/2016 at 6:11 PM, enddo said:

CJExploiter

wher is the link to download

[Technetium]

2 hours ago, mamine007 said:

wher is the link to download

here: https://github.com/enddo/CJExploiter

[mamine007]

how to use this program

[Turry]

4 hours ago, mamine007 said:

how to use this program

CJExploiter is drag and drop ClickJacking exploit development assistance tool. First open the "index.html" with your browser locally and enter target URL and click on "View Site". You can dynamically create your own inputs. Finally by click the "Exploit It" you can see the P0C.