The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Automatic CSRF protection for JavaScript apps using a Symfony API
🚀 CSRFShark - a utility for manipulating cross-site request forgery attacks
This app is an advanced XSS panel, this is used for session grabbing with XSS exploit and <img src="grabber_url">
A definitely (read: not) secure online banking site. Built for demo purposes as an example of common security vulnerabilities / what NOT to do.
👾 monitor web server's log files against CSRF attacks (a modification of apache's mod_security to log these attacks)
Hackable website for teaching/training purposes. Includes my undergraduate thesis.
Automated Blackbox CSRF vulnerability detection tools
A PHP Library for Cryptographically Secure Token Generation and Management
Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.
(csrf) google just got a idea to bypass or manipulate the 2fa in gmail service but was successfull in bypassing the device name in gmail 2fa
Bruteforce HTTP POST with CSRF token bypass (anti-CSRF)
A PSR-15 compatible middleware that is designed to simplify CSRF verifcation process
A service to handle csrf on POST|PULL\DELETE request for php application
Web CTF CheatSheet 🐈
This project is an educational example of a CSRF (Cross-Site Request Forgery) attack to demonstrate how a web application can be vulnerable to this type of attack.
📔 Simple blog project vulnerable to CSRF attacks
A CSRF attack involves a victim user, a trusted site, and a malicious site. The victim user holds an active session with a trusted site and simultaneously visits a malicious site. The malicious site injects a HTTP request for the trusted site into the victim user session compromising its integrity. In this lab, you will be attacking a web-based …
This repository contains a basic penetration testing report focusing on ethical hacking techniques and methodologies. It includes findings, analysis, and recommendations to improve the security posture of the tested system.
Orthosecure: Secure Dentistry Appointment Booking and Management System. It is designed to be robust and secure application with enhanced security and compliance checks within containerized environments. It leverages cutting-edge technologies to monitor, analyze, and secure workloads in real-time.
Add a description, image, and links to the csrf-attacks topic page so that developers can more easily learn about it.
To associate your repository with the csrf-attacks topic, visit your repo's landing page and select "manage topics."