CSRF where token is tied to non-session cookie (Video solution, Audio)

[@fannah24]

For those who are struggling to understand the payload, search 'CRLF Injection Attack', or visit CRLF on geeksforgeeks

[@venomhacks1322]

0 explanation

[@2os5]

true

[@alonsocorrea1256]

i think that you could explain the impact of this way to exploit CSRF

[@mamunurrashid9022]

I didn't understand why you copied session & csrfkey and save it on notepad, you didn't do anything with it later.!

[@some_user6929]

I'm glad you also spotted that. At 9:50 in csrfKey he should paste csrfKey from dropped in Burp's Repeater request and also from that request should copy csrf value and paste it to form .html.

[@axeldelgadillo9838]

you and rana khalil are the best

[@mushtaqueahmed6949]

Why you copied and paste csrfKey in PoC from same request. you should copy scrf from attacker request and paste in PoC

[@zipp5022]

my email address gets changed but still the lab isnt solved....

[@rud8716]

us bro us

[@zipp5022]

@@rud8716 the struggle is real bro, but it got solved eventually :)

[@rud8716]

@@zipp5022 bro what did you do, because I am also facing same problem

[@zipp5022]

@@rud8716 i wish i could help, but i solved it over a month ago, i dont exactly remember what happened, but it got solved, this lab is a big pain in the ass 😮‍💨😮‍💨

[@JollyRogers-vp5yn]

About the end of the video, in POC, you should put your csrf token on line 8 (name="csrf" value="your csrf token" This will resolve lab😊

[@EmilyAnn]

goddamit! this is not that difficult so why isn't this working for me??

[@lie-be4277]

same problem. i inspected packets and realized cookie is not changing.

[@hexbrokers9115]

my firefox private icognito not load foxyproxy add on for proxying

[@mamunurrashid9022]

you need to give permission

[@Fth.44]

Bu videodaki her şeyi defalarca yapmama rağmen bir türlü çözemedim tek tek not ediyorum nafile

[@sayeu1444]

confusing af

[@Mr.Hoque.]

Very confusion video