08_CSRF.md
January 6, 2020 ยท View on GitHub
Testing CSRF On Application :
- Csrf Normal
- Chnage Method To GET-Based
- Change Value Of CSRF-Token To undefined
- Delete CSRF Token Value Or Delete Token Parameter
- Use The same CSRF Value In Different Accounts
- Replace Value CSRF Token with Same Length Characters
- Change Content-Type from application/json to text/plain
- Use Vulnerable-Subdomain To Bypass CSRF Token