click.py

import requests
from bs4 import BeautifulSoup

def print_banner():
    print("\n=========================================")
    print("    Clickjacking Exploit Detector       ")
    print("    Created by Python 2.7")
    print("    Detect potential Clickjacking flaws ")
    print("=========================================\n")

def check_x_frame_options(headers):
    if 'X-Frame-Options' in headers:
        print("[INFO] X-Frame-Options header found: " + headers['X-Frame-Options'])
        if headers['X-Frame-Options'] == 'DENY' or headers['X-Frame-Options'] == 'SAMEORIGIN':
            print("[SAFE] Site has protection against Clickjacking.")
        else:
            print("[WARNING] X-Frame-Options set to a weak policy.")
    else:
        print("[WARNING] No X-Frame-Options header found!")

def check_csp(headers):
    if 'Content-Security-Policy' in headers:
        print("[INFO] Content-Security-Policy header found.")
        if 'frame-ancestors' in headers['Content-Security-Policy']:
            print("[SAFE] CSP has frame-ancestors directive.")
        else:
            print("[WARNING] CSP does not include frame-ancestors directive.")
    else:
        print("[WARNING] No Content-Security-Policy header found!")

def analyze_page(url):
    print("[INFO] Analyzing page:"+ url)
    try:
        response = requests.get(url)
        headers = response.headers
        
        check_x_frame_options(headers)
        check_csp(headers)
        
        soup = BeautifulSoup(response.content, 'html.parser')
        iframes = soup.find_all('iframe')
        
        if iframes:
            print("\n[INFO] Found iframe elements on the page:")
            for iframe in iframes:
                print(" - Src: " + iframe.get('src', 'No source attribute'))
                print("   Frame border: " + iframe.get('frameborder', 'Not specified'))
                print("   Width: " + iframe.get('width', 'Not specified') + "px")
                print("   Height: " + iframe.get('height', 'Not specified') + "px")
            print("\n[WARNING] Iframe elements might be used for clickjacking if not properly handled.")
        else:
            print("\n[INFO] No iframe elements detected.")
        
    except requests.exceptions.RequestException as e:
        print("[ERROR] Failed to fetch page:"+ e)

def main():
    print_banner()
    
    url = raw_input("Enter the URL of the site to scan: ").strip()
    
    if not url.startswith('http'):
        print("[ERROR] Invalid URL. Ensure the URL starts with 'http' or 'https'.")
        return
    
    analyze_page(url)

if __name__ == '__main__':
    main()