Cyber Risks · PortSwigger Research

Generate CSRF PoC - Port Swigger

Summary: PortSwigger's Burp Suite includes a function that generates a proof-of-concept cross-site request forgery attack for a given request, displaying the selected request in the top panel and the generated CSRF HTML in the lower panel. The generated HTML uses a form and/or JavaScript to reproduce the required request in the browser, and users can edit the request manually and click Regenerate to rebuild the HTML.

Bottom line: A tool that turns any captured request into a working CSRF proof-of-concept in a few clicks means the barrier to demonstrating - and exploiting - this class of flaw is now built into a mainstream scanner.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related