asked on
Lightweight freeware to test a website / URL for clickjacking
Not looking for Wireshark type of scanner which is rather large & memory hungry. Not Nessus as I
don't have a licence.
Kindly provide links that I could download freeware to scan if a website is vulnerable to clickjacking?
don't have a licence.
Kindly provide links that I could download freeware to scan if a website is vulnerable to clickjacking?
Network SecurityVulnerabilitiesSoftware
Last Comment
btan
ASKER
https://cirt.net/clickjack-test
For this link, is the tool Nikto, Davtest or CMS Explorer.
Does it run on Windows?
For this link, is the tool Nikto, Davtest or CMS Explorer.
Does it run on Windows?
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Looks like Davtest is missing something despite that ActivePerl is
installed on my Win XP with ACtivePerl's directory in the path:
D:\vaScanClickj\davtest-1.
Can't locate HTTP/DAV.pm in @INC (@INC contains: C:/Perl/site/lib C:/Perl/lib .)
at D:\vaScanClickj\davtest-1.
BEGIN failed--compilation aborted at D:\vaScanClickj\davtest-1.
30.
I'll try something else
installed on my Win XP with ACtivePerl's directory in the path:
D:\vaScanClickj\davtest-1.
Can't locate HTTP/DAV.pm in @INC (@INC contains: C:/Perl/site/lib C:/Perl/lib .)
at D:\vaScanClickj\davtest-1.
BEGIN failed--compilation aborted at D:\vaScanClickj\davtest-1.
30.
I'll try something else
ASKER
https://cirt.net/clickjack-test
When I click on "Other Codes" ==> "ClickJacking" or "Site Crunch",
nothing returns. Have to try other sites
When I click on "Other Codes" ==> "ClickJacking" or "Site Crunch",
nothing returns. Have to try other sites
ASKER
Nikto2 scans more than 400+ vulnerabilities & I can't select to scan only
for Clickjacking: this will trigger security alerts & the scan may be blocked
before I get a chance.
no Joy with davtest due to the Perl error.
I may need help with this lightweight tool to scan: is there anything
within davtest perl that can be customized to just scan clickjacking?
Any other ready-to-run scanner will be ideal as I'll need to show
the scan results by Monday noon
for Clickjacking: this will trigger security alerts & the scan may be blocked
before I get a chance.
no Joy with davtest due to the Perl error.
I may need help with this lightweight tool to scan: is there anything
within davtest perl that can be customized to just scan clickjacking?
Any other ready-to-run scanner will be ideal as I'll need to show
the scan results by Monday noon
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Got the following html page & just by launching it (after amending the URL
in it), it will be able to tell if the URL is vulnerable. Does this really work?
<html>
<head>
<title>Clickjack test page</title>
</head>
<body>
<p>URL is vulnerable to clickjacking if u can see it below; if u can see only this line, then it's not vulnerable </p>
<iframe src="http://www.xxx.com.au" width="500" height="500"></iframe>
</body>
</html>
in it), it will be able to tell if the URL is vulnerable. Does this really work?
<html>
<head>
<title>Clickjack test page</title>
</head>
<body>
<p>URL is vulnerable to clickjacking if u can see it below; if u can see only this line, then it's not vulnerable </p>
<iframe src="http://www.xxx.com.au" width="500" height="500"></iframe>
</body>
</html>
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
(may not be supporting Chrome/Safari, do see the readme.txt, not much doc though)
http://www.contextis.co.uk/services/research/clickjacking-tool/
Clickjack reveal FF plugin
https://addons.mozilla.org/en-US/firefox/addon/no-clickjacking/
standalone test html though
https://cirt.net/clickjack-test