How To Circumvent CSRF Protection!

[@sachinsaju5236]

This was well explained. Thank you so much.

[@intigriti]

Glad you enjoyed it Sachin 😍

[@gk_eth]

Great stuff!❤️

[@intigriti]

Thank you! Cheers Gokul 🔥

[@落珰]

thanks intigriti

[@intigriti]

You are very welcome! ❤️

[@fahadfaisal2383]

Thanks for the information

[@intigriti]

It's our pleasure to help :)

[@jwd42]

Hello! Little confuse........For this vulnerability we need victim account for capturing csrf token??????????

[@intigriti]

CSRF tokens are used to prevent CSRF attacks. If a site implements CSRF tokens, an attacker would need to get around that..

[@vishaalkumaranandan2894]

can this be done without burpsuite pro as I am not having it, if yes how to get the csrf html alone

[@intigriti]

Unfortunately not 😑 In real-world scenario, you would use your own server (or ngrok, requestbin etc) *but* portswigger only allow the use of burp collaborator for the WebSecAcademy labs, so you need burp pro. You can sign up for a free trial, if you haven't used it already..

[@alan.m.rebeira]

Can you guys make an video about sql injection with the help of portswigger sql injection cheat sheet

[@intigriti]

The SQL injection module will come in the future! Look out for further videos!