/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.kotowicz.net
Minus.com silent arbitrary file upload
| | www.sjoerdlangkemper.nl
Cross site request forgery (CSRF)
4.0 parsecs away

Travel
| | This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses.
| | bogs.io
bogs.io | Complete Guide to CSRF
2.9 parsecs away

Travel
| | CSRF stands for Cross-Site Request Forgery and is one of the most "popular" web application vulnerabilities
| | blog.andlabs.org
Attack and Defense Labs: XSSing client-side dynamic HTML includes by hiding HTML inside images and more
4.0 parsecs away

Travel
| | Matt Austin made a brilliant discovery sometime back and wrote a detailed post of his hack, you absolutely must read it. Basically it is a...
| | mathieu.fenniak.net
Is your Web API susceptible to a CSRF exploit? | Mathieu Fenniak
4.9 parsecs away

Travel
| Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank: