Pentest Notes

Csrf

Category Index

Jump by topic or browse the full notebook tree below.

Structured like a notebook: categories, subtopics, and individual notes.

Notes on CSRF Token.

Removing Notes and commands for Removing.
Request forgery Notes and commands for Request forgery.
Token tied to cookie CSRF token tied to a cookie (not necessarily the session cookie).
Token==Cookie Notes and commands for Token==Cookie.
u_token != session_token CSRF token is not bound to the session token.

Notes on Samesite Cookies.