clickfix

Finding ClickFix and FakeCAPTCHA like it's 1999

ClickFix / Fake Captcha Builder (GUI) with powershell payload - Dual Mode Social Engineering Toolkit

ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load

CLICKFIX is a Linux-based social engineering tool that delivers payloads using a ClickFix

ClickFix FakeCaptcha Cloudflare Worker/Page. Standalone javascript website with turnstile and IP fencing.

DEDSEC_CLICKFIX2 is a Linux-based social engineering tool that delivers payloads using a deceptive software activator method

Walking through CT logs and check for multiple Security API flags

Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom

iOS ClickFix - WebClip social engineering template. Coaches targets into installing a .mobileconfig that pins an attacker-controlled shortcut to their Home Screen. For authorized red team engagements only.

The basic scheme about phishing clickfix cloudflare turnstile. Educational purposes only!

The Click-to-Compromise technique: a minimal-interaction, post-phishing attack chain that transitions from a single PowerShell command into full system compromise. It’s designed for red teamers, malware analysts, adversary emulation professionals, and curious defenders looking to understand modern evasion techniques beyond script kiddie noise.

Real-time protection against ClickFix attacks and malicious clipboard content

A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with realistic lures and harmless payloads.

ClickFix Browser Cache Attack (PoC)

Analysis, IOCs, detection rules, and removal scripts for the ChatGPT Plus Free Trial cross-platform info-stealer (macOS + Windows)

A demonstration on how XSS can be used as a delivery mechanism for ClickFix campaigns.

This repository contains files that deonstrate the ClickFix Attack in a safe way.

ClickFix Mitigator for Dummies

Security research demonstrating ClickFix social engineering techniques for detection engineering, threat analysis, and cybersecurity awareness.