Burp Clickbandit: How to perform Clickjacking Attack // Live Hacking

Harshad Shah

Published in

Offensive Black Hat Hacking & Security

3 min readSep 29, 2023

Testing for Clickjacking: How to Bug Bounty?

Let’s Explore the following:

Burp Clickbandit
What is clickjacking?
Clickjacking attacks

Today, we’ll be diving into the world of clickjacking and learning about an essential tool for performing clickjacking attacks — Burp Clickbandit

Burp Clickbandit is available in the Burp Suite Pro version and you can simply navigate to Burp options and click on Burp Clickbandit.

Using Burp Clickbandit you can create clickjacking POC. In order to understand the definition of clickjacking vulnerability, please go below and read the definition of clickjacking.

Definition: Clickjacking is a form of attack where an unsuspecting user is tricked into clicking on something different than what they intended. It’s an effective way for attackers to control user actions and potentially gain access to sensitive information.

But fear not! By understanding clickjacking and using tools like Burp Clickbandit, we can unmask these attacks and protect ourselves.

So, here’s the scenario: You receive an email or visit a website that seems innocent enough, but little do you know, it’s a clickjacking trap. When you click on a seemingly harmless button or link, you unknowingly perform actions that you never intended.

This is where Burp Clickbandit comes in. Burp Clickbandit is a plugin for the popular web application security tool, Burp Suite. With its help, you can easily perform clickjacking attacks and understand how they work in real time.

Let’s walk through the process:

1. First, open up Burp Suite and navigate to the website you want to test.

2. Activate the Burp Clickbandit plugin, which allows you to overlay a transparent layer on top of the website.

3. Now, choose the element you want to manipulate, like a button or a link.

4. Customize the appearance and position of the overlay to make it seem seamless and unnoticeable to the user.

5. Finally, create a malicious action that will be triggered when the user interacts with the manipulated element.

Once you’re ready, sit back and watch as the clickjacking attack takes place. You’ll see how the user’s actions are hijacked, and their clicks perform unintended actions. It’s a powerful and eye-opening experience.

By utilizing Burp Clickbandit, you’ll gain invaluable knowledge about the vulnerabilities that can be exploited through clickjacking. Armed with this, you can better protect yourself and your applications from potential attacks.

Remember, understanding the techniques used by hackers is crucial in defending against them. With tools like Burp Clickbandit, we can stay one step ahead and safeguard our systems.

Thanks for reading this tutorial on unmasking clickjacking with the Burp Clickbandit. If you found this article helpful, don’t forget to subscribe to our channel for more exciting hacking insights. Stay safe and until next time!

Watch this video right now to find out more information about Burp Clickbandit

Video POC:

Burp Clickbandit: How to perform clickjacking attack // Live Hacking

Thanks & Regards

Harshad Shah

Founder & CEO, Hacker Associate