ClickJacker

ClickJacker

Tools box for clickjacking attacks

Members

Methods

Constructor

new ClickJacker(url, debugopt)

Example
const cj = new ClickJacker(url)
      .addStep({ x: 8, y: 8, width: 93.53, height: 29 })
      .addStep({ x: 101.53, y: 8, height: 29, width: 93.53 })
      .addStep({ x: 195.06, y: 8, height: 29, width: 93.53 })
await cj.run()
Parameters
Name Type Attributes Default Description
url String

Target url for clickjacking

debug Boolean <optional>
false

Run in debug mode, the iframe is not hidden

Methods

addStep(box, contentopt, waitopt) → {ClickJacker}

Add a step in the current ClickJacker, the iframe will be centered according to the bounding box.

Parameters
Name Type Attributes Default Description
box BoundingBox

Coordinate of the clickable element in the vulnerable page

content HTMLElement <optional>
null

Html element to put in the popup, if null, render a "close me" popup

wait number <optional>
200

Time to wait after a click has been detected

Returns

Return itself

Type
ClickJacker

(async) run() → {Promise.<ClickJacker>}

Async

Start the ClickJacking process.

Returns (Async)

Return itself

Type
Promise.<ClickJacker>