Click-Jackalope - Clickjacking POC generator
Summary: PortSwigger's BApp Store lists Click-Jackalope, a Burp extension by Matthew Prater, version 1.0.0, that generates clickjacking proof-of-concept pages from target URLs and inspects response headers for frame-defense directives. It adds a dedicated tab and context menu items for extracting URLs from intercepted traffic, producing ready-to-use HTML test pages, and documenting framing behavior for reports.
What's compelling: A tool that turns any intercepted URL into a working clickjacking test page in a few clicks lowers the effort needed to demonstrate whether your sites can be framed - and whether your frame-defense headers actually hold.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026