<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Detecting Clickjacking Vulnerabilities

## curl — Header Checking
```bash
curl -s -D- -o /dev/null https://target.com/ | grep -i x-frame-options
curl -s -D- -o /dev/null https://target.com/ | grep -i frame-ancestors
```

## nuclei — Clickjacking Templates
```bash
nuclei -u https://target.com -t http/misconfiguration/clickjacking/ -json
```

## Burp Suite
```
1. Proxy > Response headers > check X-Frame-Options
2. Burp Clickbandit > generate interactive PoC
```
