Clickjacking

Cross-platform resources for Clickjacking: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

Clickjacking

This page aggregates cross-platform resources to practice Clickjacking: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
PortSwigger	https://portswigger.net/web-security/clickjacking

PortSwigger labs practicing Clickjacking (5)

Lab	Difficulty	Topic	Official
Basic clickjacking with CSRF token protection	APPRENTICE	Clickjacking	Open
Clickjacking with a frame buster script	APPRENTICE	Clickjacking	Open
Clickjacking with form input data prefilled from a URL parameter	APPRENTICE	Clickjacking	Open
Exploiting clickjacking vulnerability to trigger DOM-based XSS	PRACTITIONER	Clickjacking	Open
Multistep clickjacking	PRACTITIONER	Clickjacking	Open

---

← Back to the full glossary

Last updated: 2026-05-08