skills.rest
Acczdy
AcczdyCOMMUNITY
Explore all skills by this author →
GitHub

performing-clickjacking-attack-test

Scan X-Frame-Options and CSP frame-ancestors headers to generate clickjacking PoC reports.

2|Updated Apr 14, 2026
Search Tags:#clickjacking#web-security#poc#penetration-testing#iframe#x-frame-options#frame-ancestors
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill performing-clickjacking-attack-test
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-clickjacking-attack-test
Source: https://github.com/Acczdy/MoZiSec/tree/main/web-security/.claude/skills/performing-clickjacking-attack-test
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill performing-clickjacking-attack-test

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) components.

What problem does it solve?

This Skill helps security testers identify and demonstrate clickjacking vulnerabilities by evaluating frame embedding protections and crafting proof-of-concept (PoC) scenarios.

Core Features & Use Cases

  • Checks X-Frame-Options and CSP frame-ancestors headers across multiple endpoints to determine framing protections.
  • Generates PoC content and an overlay demonstration to visualize potential UI redressing.
  • Analyzes basic JavaScript frame-busting presence and compiles a structured vulnerability report.
  • Supports multi-endpoint assessment to build a repeatable test workflow for web applications.

Quick Start

Run the agent with a target URL to perform header checks, test multiple endpoints, and generate a vulnerability report along with a PoC page.

Frequently Asked Questions about performing-clickjacking-attack-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for clickjacking vulnerabilities on a web application?▼

A clickjacking attack exploits missing X-Frame-Options or CSP frame-ancestors headers to embed a target web application in a malicious iframe. This Skill identifies these vulnerabilities by scanning endpoints and generating an overlay demonstration to visualize UI redressing.

How do I generate a clickjacking proof of concept for penetration testing?▼

You generate a clickjacking proof of concept (PoC) by creating an HTML page that overlays a deceptive UI on top of an embedded target iframe. This Skill crafts PoC content and an overlay demonstration to safely show how UI redressing attacks work.

Can I check X-Frame-Options and CSP frame-ancestors across multiple endpoints?▼

Yes, you can check X-Frame-Options and CSP frame-ancestors across multiple endpoints to build a repeatable test workflow. This Skill applies multi-endpoint assessment to evaluate frame-busting defenses and compile findings into a structured vulnerability report.

Do I need Python and the requests library to perform a clickjacking attack test?▼

Yes, you need Python and the requests library to perform a clickjacking attack test. This Skill requires the requests library to fetch HTTP headers, test multiple endpoints, and produce a structured vulnerability report with PoC content.

What is the best way to detect missing frame-busting defenses on a website?▼

The best way to detect missing frame-busting defenses is to analyze HTTP response headers and basic JavaScript protections across target endpoints. This Skill evaluates X-Frame-Options, CSP frame-ancestors, and frame-busting scripts to document vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
RifteoRifteo
30

clickjacking-hunter

Detect and bypass clickjacking vulnerabilities by analyzing HTTP headers and generating PoC HTML pages.

Official
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

cve-poc-generator

Generate Python PoC scripts and markdown reports from CVE IDs.

Community
Advanced
gongzeqgongzeq

katana-crawl-web

Crawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.

Community
Intermediate
harperaaharperaa
15

injection-vulnerabilities-ai-generated-code

Detect SQL injection and command injection vulnerabilities in AI-generated Python code.

Community
Basic