wstg-clnt-14 - Test web pages for reverse tabnabbing
Tests links, window.open calls, and dynamic link creation for reverse tabnabbing risks.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Inspect target=_blank links
- Check noopener and noreferrer
- Detect unsafe window.open calls
- Analyze dynamic link creation
- Generate a proof of concept
- Generate a test page
- Report potential findings
Inputs
- Target URL
- Target page HTML
- Browser console access
Outputs
- Console findings
- Security report
- PoC HTML page
- Test HTML page
Requirements
- Network access to target
- Python 3
- requests package
- BeautifulSoup package
- Browser JavaScript support