Skip to content

Instantly share code, notes, and snippets.

@securitytube

securitytube/csrf.py

Last active April 3, 2019 21:18
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save securitytube/e4842a9dae17e7fd716e to your computer and use it in GitHub Desktop.
Save securitytube/e4842a9dae17e7fd716e to your computer and use it in GitHub Desktop.
Download ZIP
CSRF Attacks
Raw
csrf.py
"""
This Challenge requires a 2 Step process:
1. Fetch the CSRF token from the JSON API defined below:
URL: /lab/webapp/csrf/13
Method: POST
Parameters: gettoken=true
Cookie: Required
2. Submit the Token to complete the Challege
URL: /lab/webapp/csrf/13
Parameter: token
Parameter Value: Value received from (1)
Method: GET
Cookie: Required
"""
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment