Clickjacking Detector is a powerful, Python-based tool designed to identify potential clickjacking vulnerabilities in websites. Clickjacking is a serious security threat that allows attackers to deceive users into clicking on invisible or disguised web elements, which can lead to unauthorized actions.

Key Features

• Single or Batch URL Testing: Easily test a single URL or load multiple URLs from a text file for batch analysis.
• Automated Header Checks: The tool automatically scans for common anti-clickjacking measures, including X-Frame-Options and Content-Security-Policy headers.
• Iframe Simulation: In instances where no protective headers are found, the detector attempts to load the target page within an iframe, effectively simulating a potential clickjacking attack.
• Intuitive Color-Coded Output: Results are displayed in the console using color coding:
  • Green indicates detected vulnerabilities.
  • Red signifies protected pages.
• User-Friendly Interface: The application is designed for simplicity, providing straightforward prompts and guidance throughout the testing process.

How It Works

1. Header Analysis: The tool sends a GET request to the specified URL and checks for essential anti-clickjacking headers.
2. Iframe Handling: If no headers are found, the tool initializes Selenium to load the webpage in an iframe.
3. Vulnerability Detection: If the content is successfully rendered in the iframe, it signifies a potential clickjacking vulnerability, while an error or blocked content suggests adequate protection.

Example Output

• Vulnerability Detected:

[+] Potential clickjacking detected: The page rendered within the iframe.

• Protected against Clickjacking:

[-] No clickjacking detected ! ! !

This tool is a valuable asset for web developers and security professionals looking to enhance their websites' defenses against clickjacking attacks. By utilizing modern libraries such as Selenium and Requests, the Clickjacking Detector provides accurate results while maintaining user-friendliness. Start securing your web applications today!