Basic clickjacking with CSRF token protection
Laboratorio de Portswigger sobre Clickjacking
Justice-Reaper
Exploiting time-sensitive vulnerabilities
Laboratorio de Portswigger sobre Race Conditions
Single-endpoint race conditions
Laboratorio de Portswigger sobre Race Conditions
Multi-endpoint race conditions
Laboratorio de Portswigger sobre Race Conditions
Bypassing rate limits via race conditions
Laboratorio de Portswigger sobre Race Conditions
Limit overrun race conditions
Laboratorio de Portswigger sobre Race Conditions
Performing CSRF exploits over GraphQL
Laboratorio de Portswigger sobre GraphQL API Vulnerabilities
CSRF with broken Referer validation
Laboratorio de Portswigger sobre CSRF
CSRF where Referer validation depends on header being present
Laboratorio de Portswigger sobre CSRF
SameSite Lax bypass via cookie refresh
Laboratorio de Portswigger sobre CSRF