CSRF - Lab #2 CSRF where token validation depends on request method | Short Version

[@RanaKhalil101]

Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨

[@frolicfox5432]

First things first!! Hats off Mrs. Rana Khalil for this swashbuckling video series!! Ur elucidation of this concept is amazing which made my brain store it so easily! Can't wait for ur other lectures on various portswigger labs as am madly waiting for clickjacking series!! This channel is definitely the next big thing and truly a pentester's delight!! May Allah serve you the best always and bless you! Happy if I receive a reply from you madam!

[@Gurumoorthi-u2c]

well Explained 👍

[@hellohi5814]

You already changed the email at “2:30” and it was updated, so what’s the point I didn’t get it ?

[@落珰]

thank. I will follow your course

[@S2eedGH]

thanks a lot, Can you please explain more about the third condition (no unpredictable request parameters) ? at 03:34

[@elinamk12]

big thanks to community

[@deadeye821]

which cookie editor do u use and how to install it?

[@brucebane7401]

amazing!!!!!

[@_____pd____5919]

🔥🔥🔥

[@etc.4792]

i'm followed all of your process but my lab is not solving and not congratulated me. please give me solution

[@heyybigdaddy6988]

did it work for you?

[@naveenrawat1549]

First store then view and then deliver

[@heyybigdaddy6988]

​@@naveenrawat1549 nah. It was due to LAX being implemented in all the browsers. This video is old and doesn't tell you to add %3b%20SAMESITE=NONE after your csrf key.

[@naveenrawat1549]

@@heyybigdaddy6988 ohh I got it but have you done same session csrf key I got stuck there

[@naveenrawat1549]

@@heyybigdaddy6988 brother help me how do I put this I am just after csrf key or somewhere else ? I mean if csrf= abcd12 then where do I put this

[@落珰]

thank

[@rafinrahmanchy]

Use the term "Exploitability" besides of "Analysis". It suites better

[@saikrishnapuli6591]

without deleting csrf token in the post method i have changed mail id and it worked

[@bishalshrestha3880]

First 😳

[@thesecuritypoint]

Second