Skip to content

Clickjacking

What is Clickjacking?

Clickjacking is an attack that tricks a user into clicking a webpage element which is invisible or disguised as another element. This can cause users to unwittingly download malware, visit malicious web pages, provide credentials or sensitive information, transfer money, or purchase products online.

POC

1
2
3
4
5
6
7
8
<html>
<head>
    <title>This website is vulnerable to clickjacking</title>
</head>
<body>
    <iframe style="height: 500px; width: 500px;" src="https://<companyname>"></iframe>
</body>
</html>

Tools

References