The newest Cross-Site Request Forgery (CSRF) resources are on the Cross-Site Request Forgery (CSRF) page. For a reading order instead of a date order, see the Cross-Site Request Forgery (CSRF) learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2022-01-08 2022 | Cross-Site Request Forgery (CSRF) | Complete Guide beginner | Cross-Site Request Forgery (CSRF) | Complete Guide |
| 2022-01-05 2022 | 0xInfection/XSRFProbe intermediate 2 min read | Toolkit for auditing and exploiting Cross-Site Request Forgery (CSRF/XSRF) vulnerabilities. XSRFProbe features a robust crawling engine and performs systematic checks to detect CSRF flaws and bypasses. It supports custom cookie values, generic headers, and accurate token-strength detection. The toolkit can generate both normal and maliciously exploitable proof-of-concept examples for identified vulnerabilities, offering detailed logging and a user-controlled workflow. |
| 2020-02-14 2020 | Samesite by Default and What It Means for Bug Bounty Hunters intermediate 4 min read Bug Bounty XSS | Library that details the impact of Chrome's `SameSite=Lax` default on web vulnerabilities, including Clickjacking, Cross-Site Script Inclusion (XSSI), JSONP Leaks, Data Exfiltration, XSLeaks, CORS misconfigurations, Cross-Site WebSocket Hijacking, and XSS when exploit chains involve cross-origin responses. The change affects authenticated cross-origin requests by dropping cookies, potentially breaking established attack vectors previously relied upon by bug bounty hunters. |
| 2020-01-19 2020 | Facebook GraphQL CSRF – These aren't the access_tokens you're looking for intermediate GraphQL | A CSRF-style query on business.instagram.com allowed unauthorized GraphQL calls. A bug was found in the "View the Assigned Roles and Emails of an Instagram Account" feature. The issue was discovered during authorization on business.instagram.com/login. Users without an Instagram Business account encountered an error page. This vulnerability highlights a potential security risk in Facebook's GraphQL system. |
| 2019-03-13 2019 | Brute Forcing User IDS via CSRF To Delete all Users with CSRF attack. intermediate | The content discusses testing an application with a "Delete User" module allowing admins to delete any user. The focus is on brute-forcing user IDs via CSRF (Cross-Site Request Forgery) to delete all users using a CSRF attack. This highlights a potential security vulnerability where an attacker could exploit CSRF to delete multiple users without authorization. |
| 2019-02-10 2019 | WordPress Front End Security: CSRF and Nonces | CSS-Tricks intermediate 5 min read | Library for WordPress developers detailing Cross-Site Request Forgery (CSRF) prevention using nonces. It explains how CSRF attacks exploit user trust to perform unintended actions, citing a vulnerability in the WP SEO plugin. The library demonstrates implementing WordPress's nonce functions like `wp_nonce_field`, `wp_verify_nonce`, `wp_nonce_url`, `wp_create_nonce`, and `check_ajax_referer` to validate user intent and protect against forged requests. |
| 2018-06-26 2018 | Self-XSS + CSRF to Stored XSS intermediate XSS | Renwa from Kurdistan is excited to share their first write-up on information security and bug bounties. |
| 2018-04-30 2018 | Steal CSRF/Auth/Unique key Header with XSS intermediate XSS | The content is incomplete and lacks specific information to provide a concise summary. |
| 2018-04-06 2018 | A Deep Dive into CSRF Protection in Rails – Ruby Inside – Medium intermediate | The content discusses CSRF protection in Rails, with updates reflecting code changes in Rails 6 as of June 2019. CSRF protection is crucial for securing web applications against malicious attacks. The article likely delves into the mechanisms and best practices for implementing CSRF protection in Ruby on Rails applications, emphasizing the importance of staying updated with the latest changes to ensure robust security measures. |
| 2018-01-02 2018 | 0ang3el/EasyCSRF beginner 2 min read | Library for identifying weak CSRF protection in web applications, particularly effective against API endpoints and GraphQL. EasyCSRF modifies HTTP requests to bypass common protections like content type checks and token parameters, allowing researchers to manually analyze failed versus successful actions in Burp Suite's proxy history. It supports various parameter and header name configurations, request whitelisting, and conversion between data formats. |
| 2017-02-22 2017 | Cross-Site Request Forgery is dead! intermediate 8 min read | Library for implementing Same-Site Cookies to mitigate Cross-Site Request Forgery (CSRF) attacks. This simple attribute, when added to cookies, instructs browsers to prevent them from being sent with cross-origin requests, effectively neutralizing CSRF vulnerabilities without complex server-side logic. Options include Strict mode for absolute protection, preventing cookies on all cross-origin requests, and Lax mode, which allows cookies on top-level navigations using safe HTTP methods like GET. |