Created
February 8, 2013 11:52
-
-
Save andresriancho/4738472 to your computer and use it in GitHub Desktop.
Common CSRF parameter names used by web applications, help the w3af project by submitting more!
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
COMMON_CSRF_NAMES = ( | |
'csrf_token', | |
'CSRFName', # OWASP CSRF_Guard | |
'CSRFToken', # OWASP CSRF_Guard | |
'anticsrf', # AntiCsrfParam.java | |
'__RequestVerificationToken', # AntiCsrfParam.java | |
'token', | |
'csrf' | |
) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
If you're interested, the whole source code for the CSRF detection is here: https://github.com/andresriancho/w3af/blob/threading2/plugins/audit/csrf.py