Web Application Penetration Testing with Metasploit’s wmap module
WPS Pixie Dust Attack: Manual Ralink/Broadcom
Quickjack – Hacking Facebook likes with Clickjacking
Demonstration of stealing Facebook likes with Quickjack!
Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing.
Quickjack allows you to easily perform clickjacking, or steal “clicks” from users on many websites, forcing the user to unknowingly click buttons or links (e.g., the Facebook Like button) using their own cookies. By placing the auto-generated code on any site, you can obtain thousands of clicks quickly from different users, or perform targeted attacks by luring a victim to a specific URL. It also allows you to deceive a user into believing you have information on them that you don’t, as well as coerce a user into providing information to you without even knowing it.
By Samy Kamkar
Use it @ http://samy.pl/quickjack
Get the code: https://github.com/samyk/quickjack
Music by Epoch Rises: http://soundcloud.com/epochrises