Clickjacking Test Tool

// Deconstructing the Threat //

Clickjacking (also known as a "UI Redress Attack") is a malicious technique where an attacker tricks a user into clicking something different from what the user perceives. They achieve this by displaying an invisible or disguised webpage in a frame over the visible page. When you think you're clicking a button on the top page, you're actually clicking a button on the hidden, malicious page. This can lead to unintended actions like transferring money, deleting data, or making purchases.

This tool helps you determine if your website is vulnerable by attempting to place it within an `iframe`, just as an attacker would. A secure website uses specific HTTP headers (`X-Frame-Options` or `Content-Security-Policy`) to tell browsers whether it's allowed to be framed. Our scanner checks for these defenses.