🚨 ClickJacking Vulnerability Scanner 🚨

This Python-based tool automates the detection of ClickJacking vulnerabilities by scanning a list of targets provided in a file.
For each vulnerable target found, it generates an Exploit Proof of Concept (PoC) in the form of an HTML file.
The tool is completely working and has been thoroughly tested for reliability and accuracy.

What is ClickJacking? 🤔

ClickJacking (also known as User Interface redress attack, UI redress attack, or UI redressing) is a malicious technique where a web user is tricked into clicking on something different from what they perceive, potentially revealing confidential information or taking control of their computer while interacting with seemingly harmless web pages.
A server that doesn’t return an X-Frame-Options header is vulnerable to ClickJacking attacks. The X-Frame-Options HTTP response header is used to indicate whether a browser should be allowed to render a page within a <frame> or <iframe>.
Websites can prevent ClickJacking attacks by using the X-Frame-Options header to ensure their content isn’t embedded in other sites.

Learn more on OWASP

⚡ Features

🎯 Target-Based Scanning: Automatically scans all targets listed in the provided file.
🛠️ Exploit PoC Generation: Creates an HTML-based Proof of Concept (PoC) file for each vulnerable target, saved as TargetName.html.
✅ Comprehensive Reporting: Clearly identifies and prints "Not Vulnerable" for targets that are secure.
🚀 Multithreading for Speed: Leverages multithreading to perform rapid vulnerability scanning.
🔔 Slack Integration: Sends real-time Slack alerts with attached PoC files for each vulnerable target.
📁 Organized Results: Stores all generated PoC files in a dedicated results folder, each named after the corresponding target.
🔧 Robust Error Handling: Includes detailed logging and error management to ensure smooth operation and easy troubleshooting.

Installation:

git clone https://github.com/Raiders0786/ClickjackPoc.git
cd ClickjackPoc
pip install -r requirements.txt

Example:

Example Usage of the Tool

python3 clickJackPoc.py -f domains.txt

🎯 Allowed Targets Format:

http://target.com
target.com
www.target.com
https://target.com/
https://IP:Port
IP:Port
http://IP:Port/login
http://www.target.com/directory
https://www.target.com/directory

🌟 Reach Me:

💬 Tag Me if you get rewarded 💸💰—I’d love to hear about your success! 😄
If you find this tool useful, please give it a Star ⭐ and Follow me for more cool projects!
Feel free to reach out if you have any suggestions or want to collaborate.
⚠️ Note: This tool is intended for learning purposes only.

ClickjackPoc

Install / Use

README

🚨 ClickJacking Vulnerability Scanner 🚨

What is ClickJacking? 🤔

⚡ Features

Installation:

Example:

🎯 Allowed Targets Format:

🌟 Reach Me: