Request forgery
Notes and commands for Request forgery.
Csrf
2min_rule
Notes and commands for 2min_rule.
Using GET
Notes and commands for Using GET.
u_token != session_token
CSRF token is not bound to the session token.
Token==Cookie
Notes and commands for Token==Cookie.
Token tied to cookie
CSRF token tied to a cookie (not necessarily the session cookie).
Strict Gadgets
Notes and commands for Strict Gadgets.
Removing
Notes and commands for Removing.
Ref. XSS
Notes and commands for Ref. XSS.
Defense
Notes and commands for Defense.