Nadia·Jun 20Cross-site request forgery (CSRF) (APPRENTICE)Lab 12 - CSRF vulnerability with no defenses.
abhishek sutar·Mar 19Chaining CSRF with HTML Injection to Deliver Malicious Links via Trusted Feedback EmailsModern apps try to make everything easy. A feedback feature feels pretty harmless, right? Yeah, I thought the same until curiosity led me…
Priyesh Pahade·Dec 7, 2025All about Cross-site request forgery (CSRF)Hey! I’m Priyesh — a security analyst by profession and a bug bounty hunter by passion. I spend most of my time testing web apps…A response icon1
Shawkot·Nov 21, 2025SameSite Cookie Attribute: A First Line of Defence Against CSRF (Cross-Site Request Forgery)You are reading a blog post on some website and you really liked it. And you found a button named “Share on LinkedIn/Facebook”. You click…