Akanbi Oluwakunle Johnson·Oct 3Understanding CSRF: What Really Happens Inside the BrowserAs an Application Security professional, I find it particularly interesting when I discover vulnerabilities that have a clear, real-world…
InOSINT TeambyBash Overflow·Jul 4SameSite Strict Bypass via Client-Side Redirect — Testing with Sonnet 4.6 (Medium Effort)Discover how client-side redirects can undermine SameSite=Strict and reintroduce CSRF risk.
~ Jeff ~·Mar 16Bypassing CSRF Protection with Burp MacrosAt the high security level, the login mechanism introduces an additional defense: CSRF tokens. These tokens sign each individual request…
InOSINT TeambyBash Overflow·Mar 15SameSite Lax Bypass via Method OverrideBreaking CSRF protection by abusing method override and SameSite cookie behavior.
Jitendra chandel·Feb 14CSRF in GraphQL: How a “Fixed” Vulnerability Still Allowed a BypassCSRF in GraphQL: How a “Fixed” Vulnerability Still Allowed a Bypass
Rounak Dhadiwal·Aug 4, 2025Nonce Upon a Time: A Small Misconfiguration to Account TakeoverToday we are going to look into a misconfiguration in Content Security Policy (CSP), that completely bypassed the CSRF check and led to an…A response icon1A response icon1
musayyab sharif·Jun 30, 2025Bypassing Referer-Based CSRF DefensesExplored how referer-based CSRF defenses can be bypassed by manipulating or omitting the header in weak implementations.
Karthik S·May 1, 2025How CSRF Works: A Deep Dive into Web Application SecurityWhat is CSRF Token? Cross Site Request Forgery Token is a token that is used to authorize a client request.
