Clickjacking PoC Generator | HackTricks Tools

01CONTROLS

Target URL

Used only in the browser to build the selected PoC and live preview.

Primary lure

Secondary lure

Iframe width

Iframe height

Iframe opacity

Referrer policy

Prefill parameter

Prefill value

Drag payload

XSS payload

CAPTCHA/secret pattern

Iframe `allow`

Iframe loading

Extra iframe CSS

Iframe protections / flags

Applied automatically to iframe-based techniques.

Use sandboxEmit the sandbox attribute. CredentiallessTry `credentialless` where supported.

allow-formsPermit form submission. allow-scriptsPermit scripts in frame. allow-same-originPreserve target origin behavior. allow-modalsAllow dialog workflows. allow-popupsEnable popup flows. allow-downloadsPermit downloads. allow-pointer-lockTry pointer lock. allow-top-navigation-by-user-activationPermit user-triggered top navigation.

Technique

Type

Ready

clickjacking-preview.html Live preview of the selected technique

Export Code

The big panel above is the working area. This drawer is only for exporting or fine-tuning the selected PoC.

clickjacking-preview.html Static client-side HTML

Need help? Join the HackTricks Discord for support.