Using Burp Suite Clickbandit

Burp Suite Clickbandit provides a tool to help identify clickjacking attempts. Clickjacking is where an attacking web page uses transparent layers. When a user clicks somewhere on the page thinking they are interacting with what they see, they may actually be clicking on these transparent layers without realizing it. Burp offers a great tool for helping to find this type of vulnerability.

Getting ready

To use Burp Suite to perform web application analysis against a target, you will need to have a remote system that is running one or more web applications. In the examples provided, an instance of Metasploitable2 is used to perform this task. Metasploitable2 has several preinstalled vulnerable web applications running on the TCP port 80...