Check if hidden clicks can trigger account actions.
What it does
Checks whether sensitive web pages can be framed and used to trigger unintended actions.
When to use it
Use when testing page framing, X-Frame-Options and CSP frame-ancestors protections, or clickjacking of sensitive actions.
How to use it
Give it target page URLs; it tests framing defenses and creates iframe proofs of concept, including multi-click examples when needed.
What you provide
- target page URLs
Latest review
What you need · 0
No setup requirements listed.
Access · 1
This skill
target pages
Read
Inspects and frames target pages