URL点击劫持检测工具.py

admin 2022年5月9日12:33:31评论79 views字数 740阅读2分28秒阅读模式

点击上方蓝字“Ots安全”一起玩耍

clickjacking-vulnerability-detection

Detects if the given URL is vulnerable to clickjacking vulnerability or not,This tool detects whether a given url is vulnerable to clickjacking vulnerability, and also creates a POC to verify the same.


Usage:

python3 clickjacking-detection.py -u test-website

This will just print if the website is vulnerable or not.

OR

python3 clickjacking-detection.py -u test-website --create-poc


When --create-poc optional flag is used, it creates website.html file as POC. We can then just open this file in browser and verify the contents of given url are rendered in iframe of created poc page. This shows the vulnerability.


Reference: https://www.imperva.com/learn/application-security/clickjacking/




URL点击劫持检测工具.py
精彩推荐



红队工具包合集
具有大量功能的托管反向 Shell 生成器。--(非常适合 CTF)
Brakeman 静态代码分析安全工具

URL点击劫持检测工具.py

原文始发于微信公众号(Ots安全):URL点击劫持检测工具.py

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2022年5月9日12:33:31
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   URL点击劫持检测工具.pyhttps://cn-sec.com/archives/992085.html

发表评论

匿名网友 填写信息