Skip to content

Instantly share code, notes, and snippets.

@andresriancho

andresriancho/csrf-db.py

Created February 8, 2013 11:52
Show Gist options
  • Save andresriancho/4738472 to your computer and use it in GitHub Desktop.
Save andresriancho/4738472 to your computer and use it in GitHub Desktop.
Download ZIP
Common CSRF parameter names used by web applications, help the w3af project by submitting more!
Raw
csrf-db.py
COMMON_CSRF_NAMES = (
'csrf_token',
'CSRFName', # OWASP CSRF_Guard
'CSRFToken', # OWASP CSRF_Guard
'anticsrf', # AntiCsrfParam.java
'__RequestVerificationToken', # AntiCsrfParam.java
'token',
'csrf'
)
@andresriancho
Copy link
Author

If you're interested, the whole source code for the CSRF detection is here: https://github.com/andresriancho/w3af/blob/threading2/plugins/audit/csrf.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment