IntermediateFREE13 hours
Cross-Site Request Forgery (CSRF)
// VULNERABLE: State-changing POST without CSRF token (relies on cookies)
Enroll for free to track your progress through this course.
Curriculum (25 lessons)
- 1. Cross-Site Request Forgery (CSRF)
- 2. What Is CSRF?
- 3. What Is the Impact of a CSRF Attack?
- 4. How Does CSRF Work?
- 5. How to Construct a CSRF Attack
- 6. How to Deliver a CSRF Exploit
- 7. Common Defences Against CSRF
- 8. XSS Vs CSRF
- 9. What Is the Difference Between XSS and CSRF?
- 10. Can CSRF Tokens Prevent XSS Attacks?
- 11. Bypassing CSRF Token Validation
- 12. What Is a CSRF Token?
- 13. Common Flaws in CSRF Token Validation CSRF Vulnerabilities Typically Arise Due to Flawed V
- 14. Bypassing
- 15. What Is a Site in the Context of SameSite Cookies?
- 16. What'S the Difference Between a Site and an Origin?
- 17. How Does
- 18. Bypassing SameSite
- 19. Validation of
- 20. How to Prevent CSRF Vulnerabilities
- 21. Use CSRF Tokens
- 22. Use Strict
- 23. Be Wary of Cross-Origin, Same-Site Attacks
- 24. Best Practices & Detailed Takeaways
- 25. Verify No Token Required (Detailed Curl)