Writeups
-
Easy
CSRF where token is not tied to user session
csrf where the token is validated but not tied to the user's session
Cross-site request forgery (CSRF) 3 min -
Easy
CSRF where token validation depends on token being present
csrf where the token is only checked when it is present
Cross-site request forgery (CSRF) 2 min -
Easy
CSRF where token validation depends on request method
csrf where the token is only validated on post method
Cross-site request forgery (CSRF) 2 min -
Easy
CSRF vulnerability with no defenses
csrf on an email change with no token and no defenses at all
Cross-site request forgery (CSRF) 3 min
Nothing matched that.
No writeups here yet. Try a broader tag, or clear the filter to see everything.
Clear filters