---
id: 8390
title: "Fuzzing Parameters in CSRF Resistant Applications with Burp Proxy"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/web-application-pentesting/fuzzing-parameters-in-csrf-resistant-applications-with-burp-proxy/"
published_at: "2010-09-24T00:00:00Z"
tags: ["pentesting", "fuzzing", "web-security", "owasp", "csrf", "burp-proxy"]
phying_url: "https://phying.com/item/8390"
lang: en
---

# Fuzzing Parameters in CSRF Resistant Applications with Burp Proxy

## Summary

A NetSPI walkthrough of CSRF basics and using Burp Proxy to fuzz parameters in CSRF-resistant apps, covering attack vectors from image tags to XSS-chained requests and why token fixes are imperfect.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2010-09-24T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/web-application-pentesting/fuzzing-parameters-in-csrf-resistant-applications-with-burp-proxy/
- **Phying News:** https://phying.com/item/8390