3967 matches found
unilogies/bumsys < v2.0.2 - Clickjacking
This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...
html-poc
Código de prueba de concepto para vulnerabilidades del lado del cliente Pruebas de concepto básicas en HTML para problemas como: Clickjacking Configuración insegura de CORS CSRF Tabnapping XSSI Problemas con postMessage La mayoría de estas son bastante básicas, pero tenerlas todas en un solo luga...
quickjack
Quickjack Quickjack 是一款直观的点选式工具，用于执行高级且隐蔽的点击劫持和框架切片攻击。 直接使用 Quickjack 工具访问：http://samy.pl/quickjack/quickjack.html 作者 @SamyKamkar // [email protected] // http://samy.pl // 2014年12月22日 代码托管在 github 概述 Quickjack 让你能轻松执行 点击劫持，即从许多网站的用户那里窃取“点击”，迫使他们在不知情的情况下，利用自己的 cookie 点击按钮或链接（例如 Facebook...
Clickjacking-Tester
Probador de Clickjacking Un script de Python diseñado para comprobar si el sitio web es vulnerable a clickjacking y crea un poc. Captura de pantalla Uso root@kitploit: python3 clickjackingtester.py Ejemplo Entrada root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit:...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector El Clickjacking Exploit Detector utiliza técnicas de escaneo de páginas web para identificar posibles vulnerabilidades y proporcionar análisis de esos elementos. Características Escaneo de HTML: Comprueba elementos HTML y elementos iframe que pueden ser explotados pa...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
XSSTracer
XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer 是一个小型 Python 脚本，用于检查远程 Web 服务器的 Clickjacking、跨框架脚本、跨站追踪和主机头注入漏洞。 root@kitploit: 用法: ./xsstracer...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Puntuación base: 6.5 MEDIO Escala: CVSS ⚠️ 📌 Descripción Este repositorio demuestra una falla de seguridad del tipo Clickjacking presente en el sitio del G1. La vulnerabilidad permite que un atacante cargue el sitio dentro de un iframe ,...
clickjacking-poc
Herramienta de PoC para Clickjacking Una herramienta básica para generar pruebas de concepto de clickjacking basadas en una URL determinada. Compilación La compilación debería ser sencilla... root@kitploit: $ go get $ go build Uso Uso básico: clickjacking-poc -u https://example.com La herramienta...
CVE-2026-87538
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed...
CVE-2026-87486
Clickjacking in TrustedWebActivities in Google Chrome on on Android pr...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allo...
CVE-2026-87538
A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...
CVE-2026-87486
A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...
CVE-2026-87655
A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...
DEBIAN-CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87538
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87538
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...