Security article
CSRF where token validation depends on token being present
CSRF where token validation depends on token being present: To solve the lab, use your exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address. • Security • CSRF • csrf, security
Lab: CSRF where token validation depends on token being presentTo solve the lab, use your exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address.
in this example I first atempted to change request method but I faced 404. I kept the request method as POST but I removed the parameter CSRF_TOKEN then it wasnt validated on the server-side at all.
