Performing CSRF exploits over GraphQL
Laboratorio de Portswigger sobre GraphQL API
Justice-Reaper
CSRF with broken Referer validation
Laboratorio de Portswigger sobre CSRF
CSRF where Referer validation depends on header being present
Laboratorio de Portswigger sobre CSRF
SameSite Lax bypass via cookie refresh
Laboratorio de Portswigger sobre CSRF
SameSite Strict bypass via sibling domain
Laboratorio de Portswigger sobre CSRF
SameSite Strict bypass via client-side redirect
Laboratorio de Portswigger sobre CSRF
SameSite Lax bypass via method override
Laboratorio de Portswigger sobre CSRF
CSRF where token is duplicated in cookie
Laboratorio de Portswigger sobre CSRF
CSRF where token is tied to non-session cookie
Laboratorio de Portswigger sobre CSRF
CSRF where token is not tied to user session
Laboratorio de Portswigger sobre CSRF