#!/usr/bin/env bash # Name of firefox binary firefox="firefox" # If firefox developer edition is installed, use that instead type "firefox-developer-edition" 2>&1 >/dev/null && firefox="firefox-developer-edition" # Name of firefox profile to use # This will need to be a profile that isn't currently open # I suggest making one for headless use # go to about:profiles in firefox to create one profile="headless" # Url of site to put in iframe url="$1" # Name of image to make output="${2:-screenshot.png}" source=" Clickjacking example

Clickjacking example

If content is rendered above, the site is vulnerable to clickjacking

" $firefox -P "$profile" --screenshot "$output" "data:text/html;base64,$(echo "$source" | base64 -w 0)"