CSRF where Referer validation depends on header being present
Laboratorio de Portswigger sobre CSRF
Justice-Reaper
SameSite Lax bypass via cookie refresh
Laboratorio de Portswigger sobre CSRF
SameSite Strict bypass via sibling domain
Laboratorio de Portswigger sobre CSRF
SameSite Strict bypass via client-side redirect
Laboratorio de Portswigger sobre CSRF
SameSite Lax bypass via method override
Laboratorio de Portswigger sobre CSRF
CSRF where token is duplicated in cookie
Laboratorio de Portswigger sobre CSRF
CSRF where token is tied to non-session cookie
Laboratorio de Portswigger sobre CSRF
CSRF where token is not tied to user session
Laboratorio de Portswigger sobre CSRF
CSRF where token validation depends on token being present
Laboratorio de Portswigger sobre CSRF
CSRF where token validation depends on request method
Laboratorio de Portswigger sobre CSRF