Jack v1.0 Illustrate ClickJacking Vulnerabilities

Jack v1.0 Illustrate ClickJacking Vulnerabilities

Jack is a web based tool to illustrate ClickJacking vulnerabilities found in web applications.

Jack allows for implementers to check if certain online resources are vulnerable to ClickJacking, furthermore Jack allows implementers to implement a ClickJacking PoC of the targeted online resource to demo credential harvesting using basic HTML elements and JavaScript events. Jack allows the implementers to generate a local instance of the malicious PoC and deploy to a HTTP container such as Apacher.

Jack is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License

Jack Contains:

  • resources/**
  • index.html
  • sandbox.html
  • oldIndex.html


[button size=large style=round color=red align=none url=https://github.com/sensepost/jack]Download Jack v1.0[/button]

Thanks to our friend Chris Le Roy, for sharing this tool with us 😉


www.artssec.com @maxisoler