Solving Portswigger Academy: CSRF where token is not tied to user sessionThis lab’s email change functionality is vulnerable to CSRF. It uses tokens to try to prevent CSRF attacks, but they aren’t integrated into…Oct 16, 2024Oct 16, 2024
Solving Portswigger Academy: CSRF where token validation depends on token being presentThis lab’s email change functionality is vulnerable to CSRF.Oct 15, 2024Oct 15, 2024
Solving Portswigger Academy: CSRF where token validation depends on request methodThis lab’s email change functionality is vulnerable to CSRF. It attempts to block CSRF attacks, but only applies defenses to certain types…Oct 15, 2024Oct 15, 2024
Solving Portswigger Academy: CSRF vulnerability with no defensesThis lab’s email change functionality is vulnerable to CSRF.Oct 14, 2024Oct 14, 2024
