Analysis Status:
💻 Developer Directive
🛡️ Threat Overview
// Deconstructing the Threat //
Clickjacking (also known as a "UI Redress Attack") is a malicious technique where an attacker tricks a user into clicking something different from what the user perceives. They achieve this by displaying an invisible or disguised webpage in a frame over the visible page. When you think you're clicking a button on the top page, you're actually clicking a button on the hidden, malicious page.
This tool helps you determine if your website is vulnerable by attempting to place it within an iframe, just as an attacker would. A secure website uses specific HTTP headers (X-Frame-Options or Content-Security-Policy) to tell browsers whether it's allowed to be framed. Our scanner checks for these defenses.