Akanbi Oluwakunle Johnson·Oct 3Understanding CSRF: What Really Happens Inside the BrowserAs an Application Security professional, I find it particularly interesting when I discover vulnerabilities that have a clear, real-world…
InOSINT TeambyBash Overflow·Jul 4SameSite Strict Bypass via Client-Side Redirect — Testing with Sonnet 4.6 (Medium Effort)Discover how client-side redirects can undermine SameSite=Strict and reintroduce CSRF risk.
~ Jeff ~·Mar 16Bypassing CSRF Protection with Burp MacrosAt the high security level, the login mechanism introduces an additional defense: CSRF tokens. These tokens sign each individual request…
InOSINT TeambyBash Overflow·Mar 15SameSite Lax Bypass via Method OverrideBreaking CSRF protection by abusing method override and SameSite cookie behavior.
Jitendra chandel·Feb 14CSRF in GraphQL: How a “Fixed” Vulnerability Still Allowed a BypassCSRF in GraphQL: How a “Fixed” Vulnerability Still Allowed a Bypass
