How To Search For CSRF!

[@igbinosuneric]

they say you learn by doing. did not understand CSRF still I did this tutorial, plus I don't have burp bro so I modify the HTML template to look like yours. keep it up, guys

[@intigriti]

We are glad to hear that you are learning from our videos 😇 Good luck on your journey!

[@bertrandfossung1216]

I love intigriti. We'll start hunting on that platform soon. Thank you for all you do to make us better Security reserchers. Great video. My best bug class. CSRF 🔥🔥🔥🔥

[@intigriti]

Niiiice, we are looking forward to welcoming you on our platform 🥳.

[@dennismunyaka6537]

intigiriti not a bad platform. only problem for me is the language barrier haha

[@fahadfaisal2383]

Nice man . Keep it going

[@intigriti]

Thanks, will do!

[@KarolPosiewała]

You are great! Keep good work. I hope you now you are helping lots of ppl to turn around their lives :)

[@intigriti]

🙏🥰

[@Sana123236]

do you know which software is this?

[@MCTorse]

Hey! The video is very useful, thank you! I have a question, how do we know which request headers to remove?

[@intigriti]

Generally speaking you will have to learn what the different request headers are used for. You can always send the request to Burp's repeater and start by removing individual headers to see what happens, playing around with them.

[@dustinjoosen5901]

Thanks. I had a lot of issues with this lab

[@intigriti]

Glad it helped!

[@HerbertEduardoFernandezTamayo]

great walkthrough, thanks a lot. Question: if the webapp use JWT instead of session's cookies, this means the application is totally immune to CSRF attack?

[@intigriti]

Pretty much yes. If your application uses an authorization header which is not automatically set by the browser (such as cookies and basic auth), there is chance for CSRF.

[@Sana123236]

@0.33 Which application is this? newbie here

[@intigriti]

Hey! You wanting to know which portswigger lab it is? If so, it's portswigger.net/web-security/csrf/lab-no-defenses but if you are wondering what tool is shown there, it's burp suite (also by portswigger) 🙂

[@Sana123236]

@@intigriti Thank you so much for your quick response!

[@AnthonyMcqueen1987]

Pure gold

[@intigriti]

⭐️

[@paulojr1384]

many tnx

[@intigriti]

You are very welcome ❤️

[@mehrankurd]

great

[@lethalleet]

First again

[@intigriti]

🏎

[@落珰]

Thank you. intigriti

[@intigriti]

Of course 💪