PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cross-site request forgery: The ultimate Bug Bounty guide to exploiting CSRF vulnerabilities

yeswehack.com | blog | #bug-bounty | #browser-security | #web-security | #xss | #csrf | #guide
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A 'Vulnerability Vectors' guide to CSRF: how attacks work, POST-based, GET-based and stored variants, login CSRF chained with XSS, advanced bypasses, and prevention best practices.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · yeswehack.com
‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story
Bug hunter yassine_eal explains how he picks targets by available time and recalls his proudest find — a CSRF that gave admin control over an enterprise's app-store code deployments.
blog · yeswehack.com
ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundup
Roundup: Elttam's ORM leak research on Django and Prisma, Doyensec reviving CSRF via client-side path traversal, race-condition bugs, and ServiceNow exploit chains.
blog · blog.trailofbits.com
Secure your Apollo GraphQL server with Semgrep
Trail of Bits added nine Semgrep rules to detect CSRF, rate-limiting, and CORS misconfigurations in Apollo GraphQL server v3 and v4, with guidance on fixing common GraphQL security flaws.
Back