Professional / Community 1.6.32
Summary: PortSwigger released Burp Suite Professional / Community 1.6.32 on 9 December 2015, adding a new tool called Burp Clickbandit for generating clickjacking attacks to confirm that a suspected vulnerable web page can actually be exploited. Burp Clickbandit is written in pure JavaScript and is run by copying its script to the clipboard and pasting it into the browser's web developer console, and it works on all modern browsers except Microsoft IE and Edge.
Key Takeaway: Clickjacking confirmation now takes a clipboard paste into a developer console rather than a custom-built proof of concept, which lowers the effort for anyone testing whether your pages can be framed and tricked into clicks.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026