Scripting is too much for me...😓 Thanks!!

Hi rana hope you're doing well. how were you able to refresh the tab and see the results you've gotten from repeater, actually i couldn't replicate that, btw I am using firefox and foxyproxy in my side

00:05 - CSRF vulnerability allows email change without defenses. 01:43 - Demonstrating CSRF vulnerability through email change function. 03:26 - Analyzing CSRF vulnerability conditions through email change functionality. 04:51 - Understanding CSRF vulnerability with predictable request parameters. 06:08 - CSRF forms can be exploited for unauthorized actions. 07:24 - Demonstrating a CSRF exploit using an exploit server. 09:01 - Demonstrating a CSRF exploit to change a user's email address. 10:29 - Demonstrating a CSRF exploit through user interaction.

fantastic

expire otp ? hhhhhhhh

Such a detailed explanation!

Clear my all doubts,Thnx😊

Thank you.

Hi Rana do you have any discount codes now for your academy? Interested in purchasing

thank you so much , video is very usefull

I seems that your voice is need to more clear and slow. Finally it's very helpful.

thanks this video is very helpful

Useless video

Muchas gracias!!

nice :D

Muchas gracias maja!

thanks

I get invalid CSRF token

hey please keep going with the videos, they are quite good, great job and thank you!.

You already changed the email at “2:30” and it was updated, so what’s the point I didn’t get it ?

But how can i get table name in real world in this case, i mean blind SQL?

Thank you very much!!!!

❤❤❤ from Pakistan😊

Hey Rana - really good tutorial. May I ask why are you taking notes on VScode?

Hello How do I create an exploit server to receive emails in real life? Could you please explain me that?

i love her guys

I love your explaination! Thanks!

It is better to use binary search

19:52 U can also use substring to determine the length of the password. By increasing the first number and testing if the substring equals nothing (empty). 'AND..Substring (....20,1) = [nothing) IF IT equals nothing it means we exceeded the length

free palestine

Hi Rana, this is the best video on CSRF. I've watched about four videos, but they lack substances and contents. Yours presented with detailed explanations about the GET and POST methods used in CSRF, included diagrams and traffic flow directions. @Timeline 35:17, can you please clarify is session token = cookie session?

Very useful Thanks alot :)

All of These images requests at 3:01 do not appear in my burp . Do you know why ? I don’t modify anything it’s just the default burp setting in Kali Linux

Best video on this topic. This is gold. Thanks so much for this.

terrible voice

i learn from videos how do i get video classes

In this experiment, why can't I see the log after I input the poc according to your method and click Send to the victim api key in

Awesome,

i just love your videos .. ❤❤