/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.takemyhand.xyz
Escalating subdomain takeovers to steal cookies by abusing document.domain
| | timtech.blog
CSRF When You Least Expect It.
5.0 parsecs away

Travel
| | Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies.
| | blog.val.town
Introducing val.run
5.5 parsecs away

Travel
| | Increasing the security of Val Town by isolating domains.
| | blog.doyensec.com
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF ยท Doyensec's Blog
5.5 parsecs away

Travel
| | Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF
| | smagin.fyi
I had questions about CSRF | SMAGIN
16.4 parsecs away

Travel
| I knew what is the forgery like but had to dig why the standard protection works. I still don't undertand a thing or two.