clickfix

Finding ClickFix and FakeCAPTCHA like it's 1999

DEDSEC_CLICKFIX2 is a Linux-based social engineering tool that delivers payloads using a deceptive software activator method

CLICKFIX is a Linux-based social engineering tool that delivers payloads using a ClickFix

Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom

ClickFix FakeCaptcha Cloudflare Worker/Page. Standalone javascript website with turnstile and IP fencing.

iOS ClickFix - WebClip social engineering template. Coaches targets into installing a .mobileconfig that pins an attacker-controlled shortcut to their Home Screen. For authorized red team engagements only.

The Click-to-Compromise technique: a minimal-interaction, post-phishing attack chain that transitions from a single PowerShell command into full system compromise. It’s designed for red teamers, malware analysts, adversary emulation professionals, and curious defenders looking to understand modern evasion techniques beyond script kiddie noise.

The basic scheme about phishing clickfix cloudflare turnstile. Educational purposes only!

Real-time protection against ClickFix attacks and malicious clipboard content

A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with realistic lures and harmless payloads.

Analysis, IOCs, detection rules, and removal scripts for the ChatGPT Plus Free Trial cross-platform info-stealer (macOS + Windows)

This repository contains files that deonstrate the ClickFix Attack in a safe way.

ClickFix Browser Cache Attack (PoC)

A demonstration on how XSS can be used as a delivery mechanism for ClickFix campaigns.

ClickFix Mitigator for Dummies

Security research demonstrating ClickFix social engineering techniques for detection engineering, threat analysis, and cybersecurity awareness.

Regex patterns for detecting ClickFix social engineering attacks

A lightweight Windows clipboard protection tool built in Rust. ClickFix Shield detects and blocks suspicious PowerShell or CMD payloads copied to your clipboard — preventing “ClickFix”-style malvertising attacks before they ever reach your system.

Seven defensive macOS tools against ClickFix paste attacks and infostealers: a zsh execution guard, a clipboard watchdog, canary tokens, download triage and a secret blast-radius audit. Defensive use only.