jab2870/Dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Adds script to make clickjacking screenshot

Browse source
This commit is contained in:
Jonathan Hodgson 2020-05-25 17:48:56 +01:00
parent 97a886b15b
commit e973957094
1 changed files with 53 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

53
bin/.bin/webtest/clickjacking Executable file
View file

@ -0,0 +1,53 @@
#!/usr/bin/env bash
# Name of firefox binary
firefox="firefox-developer-edition"
# Name of firefox profile to use
# This will need to be a profile that isn't currently open
# I suggest making one for headless use
# go to about:profiles in firefox to create one
profile="headless"
# Url of site to put in iframe
url="$1"
# Name of image to make
output="${2:-screenshot.png}"
source="
<!DOCTYPE html>
<html>
<head>
<meta charset='UTF-8' />
<meta name='viewport' content='width=device-width' />
<title>Clickjacking example</title>
<style type='text/css' media='screen'>
body{
width: 100vw;
height: 100vh;
border: 2px solid black;
}
iframe{
border: 3px solid black;
width: 80%;
height: 80%;
margin: 20px auto;
display: block;
}
h1, p{
text-align: center;
}
</style>
</head>
<body>
<h1>Clickjacking example</h1>
<iframe src='$url'>
</iframe>
<p>If content is rendered above, the site is vulnerable to clickjacking</p>
</body>
</html>
"
firefox-developer-edition -P headless --screenshot "$output" "data:text/html;base64,$(echo "$source" | base64 -w 0)"