08_CSRF.md

January 6, 2020 ยท View on GitHub

Testing CSRF On Application :

  • Csrf Normal
  • Chnage Method To GET-Based
  • Change Value Of CSRF-Token To undefined
  • Delete CSRF Token Value Or Delete Token Parameter
  • Use The same CSRF Value In Different Accounts
  • Replace Value CSRF Token with Same Length Characters
  • Change Content-Type from application/json to text/plain
  • Use Vulnerable-Subdomain To Bypass CSRF Token