Hello, everyone, and welcome to this video.
So in this video, we are going to see an interesting tool that we have created to identify click checking
based on liabilities.
So in case you have multiple targets and you need to identify everything based on automation and you
do not want to manually write the code, go to the browser, check if it is loading into the iFrame
successfully or not, and identifying if the target is vulnerable or not.
So you're we have coded a pattern, simple script, which will help you to even create the PEOC and
prove the click tracking based flaws.
This is going to help you to identify multiple targets and it is going to help your help you save your
time as well.
So let's quickly see, how can we use this script to identify if the targets are vulnerable to click
tracking.
All right.
So it is a python based tool.
So obviously we had to write Python Click Juggernaut by and then the target Web site name.
So let's say we try, first of all, in this website, which is test BHP dot dot com.
As we know, this website is vulnerable to click tracking.
Let's identify if you are able to see that if it gets detected by our tool and does it create a block
for us.
So I'm just going to simply hit enter and you can see it is just complete and you can see the click
jerking test results.
Our target is this website and you can see the target is rendered below, which prove that it is one
level.
And again, this is the example of click tracking iFrame and link, which is normally invisible, perfect.
So we are able to identify the target as vulnerable as well as we are able to generate a C to which
you can just simply click a screenshot and send it to the target program.
Obviously, remember when you are identified, click tracking based on abilities you also need to show
or action.
It can be a sensitive action that basically get approved whenever you are going to test click tracking
based on abilities.
All right.
So let's test one more target to confirm everything is working fine.
So we have already proved the flaw on only Norten.
And let's see if the tool identifies the click tracking vulnerability onto this target.
So I'm just going to hit enter and you can see click tracking test results.
If you see the target website is rendered below, it is vulnerable and perfect.
We are able to see the target website is rendered below.
Now you can further make the PEOC generate a certain set of actions from the target through the tool
that we have already seen.
And you can make a successful policy and increase the severity of the website and submit it to the target
program as well.
So I hope you guys understood and this is going to help you a lot in automating your work identification
of a vulnerable website and later on identifying sensitive actions onto that website and making a report
and sending it to the target bug bounty program or your penetration testing job.
So I hope you guys understood.
Thank you.