<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing CSP Bypass Testing

## curl — CSP Extraction
```bash
curl -s -D- https://target.com/ | grep -i content-security-policy
curl -s -D- https://target.com/ | grep -i content-security-policy | tr ';' '\n'
```

## Google CSP Evaluator
```
https://csp-evaluator.withgoogle.com/
Paste CSP string for automated weakness analysis
```

## nuclei — CSP Scanning
```bash
nuclei -u https://target.com -t http/misconfiguration/csp/ -json
```
