clickjacking

What problem does it solve?

This Skill helps identify and demonstrate clickjacking vulnerabilities, where users are tricked into clicking on hidden or disguised elements, leading to unintended actions.

Core Features & Use Cases

• Frameability Detection: Checks if a target page can be loaded within an iframe.
• Header Analysis: Inspects X-Frame-Options and Content-Security-Policy headers for framing restrictions.
• Bypass Techniques: Explores methods to circumvent frame-busting JavaScript defenses.
• Use Case: A security tester can use this skill to quickly verify if a sensitive web application endpoint, like a password reset function, is vulnerable to clickjacking attacks.

Quick Start

Use the clickjacking skill to test if the target URL 'https://example.com/transfer' can be loaded in an iframe.