Subvert is a toolkit for different kinds of clickjacking, including a library for iframe-based attacks and a set of extensible demos showcasing both the library and more modern double-clickjacking attacks.
The library is in library/ and you can see the demos at subvert.jer.app. To run the demos locally, run bun run dev or npm run dev or however else you prefer to run vite.