This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Click Me Project"

From OWASP
Jump to: navigation, search
Line 55: Line 55:
 
* Arun Kumar
 
* Arun Kumar
  
 +
== References ==
 +
* https://www.owasp.org/index.php/Clickjacking
 +
: OWASP definition on Click jacking or "UI redress attack"
 +
 +
*https://www.owasp.org/index.php/Testing_for_Clickjacking_(OWASP-CS-004)
 +
: OWASP test guide for Click jacking attacks.
  
 
= Road Map and Getting Involved =
 
= Road Map and Getting Involved =
Line 66: Line 72:
 
*Create a GUI which will help to provide a Proof of Concept on how the attack could be exploited for a given web page.
 
*Create a GUI which will help to provide a Proof of Concept on how the attack could be exploited for a given web page.
  
−
 
−
== References ==
 
−
* https://www.owasp.org/index.php/Clickjacking
 
−
: OWASP definition on Click jacking or "UI redress attack"
 
−
 
−
*https://www.owasp.org/index.php/Testing_for_Clickjacking_(OWASP-CS-004)
 
−
: OWASP test guide for Click jacking attacks.
 
  
 
=Project About=
 
=Project About=

Revision as of 17:50, 4 March 2014

OWASP Project Header.jpg

OWASP Click Me Project

The OWASP Click Me Project aimed at having a simple GUI which helps to create a test page for Clickjacking attacks.This type of attack occurs when a malicious site tricks a user into clicking on a hidden element that belong to another site which they have loaded in a hidden frame or iframe. OWASP Click Me tool will help you to test whether your site is vulnerable to this attack by creating a html page that will try to load your web site from a frame.

Licensing

The OWASP Click Me Project is free to use. It is licensed under the Apache 2.0 License.

The OWASP Click Me Project provides:

  • Proof of concept for Clickjacking vulnerability .

Project Leader

Arun Kumar


Quick Download

  • Link to page/download


Classifications

Owasp-incubator-trans-85.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files TOOL.jpg


Volunteers

The OWASP Click Me Project: The primary contributors to date have been:

  • Arun Kumar

References

OWASP definition on Click jacking or "UI redress attack"
OWASP test guide for Click jacking attacks.

As of March 2014, the priorities are:

  • Creating the test html page.

Involvement in the development and promotion of the OWASP Click Me Project is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

  • Create a GUI which will help to provide a Proof of Concept on how the attack could be exploited for a given web page.


PROJECT INFO
What does this OWASP project offer you? 		RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Click Me Project (home page)
Purpose: OWASP Click Me Project aimed at having a simple GUI which helps to create a test page for Clickjacking attacks
License: OWASP Click Me is free to use and is licensed under Apache 2.0
who is working on this project?
Project Leader(s):
  • Arun Kumar @
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Key Contacts
  • Contact Arun Kumar @ to contribute to this project
  • Contact Arun Kumar @ to review or sponsor this project
current release
Not Yet Published
last reviewed release
Not Yet Reviewed


other releases

Retrieved from "https://wiki.owasp.org/index.php?title=OWASP_Click_Me_Project&oldid=169397"