Nexcore//Alliance
Red Team

CLICKJACKING TESTER

Test target domains against framing vulnerabilities. Audits X-Frame-Options parameters and Content Security Policy frame-ancestors compliance.

Target Verification Scope

Tester Guidance

  • Audits target domain responsiveness inside custom frames and boundaries.
  • Verifies X-Frame-Options headers presence and resolves value settings.
  • Checks frame-ancestors parameters in CSP configurations to block overlay leaks.