Hello, everyone, and welcome to this video.
So till now, we have been pretty much confident in identifying click tracking based vulnerabilities.
So now, you know, we have one more alternative to identify click tracking based when liabilities quickly
on the go.
So here we have our Target website, which is TechCrunch dot com, and we are going to see if this website
is vulnerable to click checking.
So simply first, I'm going to copy the you all.
So we are going to test this later on to identify if it is vulnerable or not.
So for this, you can log on to security Hadass dot com, which basically kinds of probes out all the
security headers which have been associated with any particular Web site.
So basically, as you can see, there is a big scan button over here where you need to enter the address
of the target Web site.
And it can therefore, once you do that, this website will basically scan all the target security headers
onto the target Web site to identify if it fits in any of these columns.
As you can see, it says Hall of Fame or Hall of Fame, in case it has all the required security headers.
Then it is going to give a grade based on the headers present.
And if it misses any of the headers and it is going to put it into the column of Hall of Shame, which
basically means the security is low and there are no headers present.
So let's quickly see how do we do it.
So once you're onto this target Web site, kindly enter the target over here.
So I'm going to enter the target over here and hit on scan.
So as I said that we are going to see a grade based on the security headers.
And you we have seen that the grade that has been given is a grade of F.
That basically means that the website TechCrunch dot com misses all the required and necessary security
headers.
Thus it lies into the column of Hall of Shame, which basically means there is a lack of a security.
And now, you know, we can observe the most important thing that we want to look on, which is the
extreme options, and you can see the Red Cross over there, which confirms that this website will be
vulnerable to click jacking as there is no extreme options moving down.
If you want to read about any of the security headers or what they actually mean, you can read it over
here into the documentation part that there has been an excellent one liner for each of the security
headers, which you can read from here and understand.
And also they have given the mitigations of what will happen if you implement these headers.
So I hope you guys understood how you can utilize this website on the go to identify multiple websites
in case they lack any of the security headers to give a great which ranges from A to F.
Thank you.