skills.rest
Rifteo
RifteoOFFICIAL
Explore all skills by this author →
GitHub

clickjacking-hunter

Detect and bypass clickjacking vulnerabilities by analyzing HTTP headers and generating PoC HTML pages.

30|6|Updated May 13, 2026
Search Tags:#clickjacking#web security#vulnerability detection#UI redressing#PoC generation
One-click install
npx skills add https://github.com/Rifteo/skills --skill clickjacking-hunter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: clickjacking-hunter
Source: https://github.com/Rifteo/skills/tree/main/clickjacking-hunter
Command: npx skills add https://github.com/Rifteo/skills --skill clickjacking-hunter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, urllib, datetime, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps detect and bypass clickjacking vulnerabilities, ensuring web applications are secure against UI redressing attacks.

Core Features & Use Cases

  • Framing Protection Detection: Identifies X-Frame-Options and Content-Security-Policy headers for secure framing.
  • JavaScript Frame-Busting Bypass: Offers methods to bypass JavaScript-based frame-busting techniques.
  • Proof-of-Concept Generation: Creates PoC HTML pages for manual testing and reporting.
  • Automated Scan and Reporting: Automatically scans endpoints and generates reports detailing findings and remediation steps.
  • Use Case: Use this Skill to test a web application for clickjacking vulnerabilities and automatically generate PoC and reports.

Quick Start

Use the clickjacking-hunter skill to scan the '/account/settings' endpoint of your target application.

Frequently Asked Questions about clickjacking-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect clickjacking vulnerabilities on web application endpoints?▼

Detect clickjacking vulnerabilities by analyzing HTTP headers like X-Frame-Options and Content-Security-Policy. This Skill automates endpoint scanning, evaluates JavaScript frame-busting code, and generates detailed reports for remediation.

How can I bypass JavaScript frame-busting techniques during UI redressing tests?▼

Bypass JavaScript frame-busting techniques by applying specialized bypass methods provided by the Skill. It analyzes client-side scripts and generates a PoC HTML page to successfully demonstrate UI redressing against the target.

Can I automatically generate a clickjacking PoC HTML page for security reporting?▼

Yes, you can automatically generate a clickjacking PoC HTML page for reporting. The Skill creates proof-of-concept pages that demonstrate the vulnerability, allowing you to manually test and document the UI redressing attack.

Do I need Python requests and urllib to test for X-Frame-Options and CSP headers?▼

Yes, you need Python requests, urllib, and datetime libraries to test for X-Frame-Options and CSP headers. These dependencies enable the automated HTTP requests, endpoint scanning, and timestamped reporting required for vulnerability detection.

What is the best way to scan an API endpoint for UI redressing protection?▼

The best way to scan an API endpoint for UI redressing protection is using automated vulnerability detection. This Skill analyzes security headers and JavaScript code, automatically identifying missing framing protections and generating actionable remediation reports.

Related Skills

Explore More Software Engineering Skills→
ErixWongErixWong
17

net-operations

Perform DNS lookups, SSL certificate analysis, and HTTP header checks.

Community
Intermediate
cenjiecenjie

penetration-testing

Identify and validate security vulnerabilities through simulated attacks on applications and networks.

Community
Advanced
dapperdiversdapperdivers
1

vuln-scan

Scan web applications for vulnerabilities using nuclei and nikto.

Community
Advanced
utsavthakurutsavthakur

clickjacking

Detect and simulate clickjacking attacks by analyzing X-Frame-Options and CSP frame-ancestors headers.

Community
Advanced