#!/usr/bin/env bash
# Name of firefox binary
firefox="firefox-developer-edition"
# Name of firefox profile to use
# This will need to be a profile that isn't currently open
# I suggest making one for headless use
# go to about:profiles in firefox to create one
profile="headless"
# Url of site to put in iframe
url="$1"
# Name of image to make
output="${2:-screenshot.png}"
source="
Clickjacking example
Clickjacking example
If content is rendered above, the site is vulnerable to clickjacking
"
firefox-developer-edition -P headless --screenshot "$output" "data:text/html;base64,$(echo "$source" | base64 -w 0)"