Haft

❯

Portswigger Labs

❯

Folder: Portswigger-Labs/CSRF

12 items under this folder.

Nov 18, 2025
CSRF vulnerability with no defenses
Nov 18, 2025
CSRF where Referer validation depends on header being present
Nov 18, 2025
CSRF where token is duplicated in cookie
Nov 18, 2025
CSRF where token is not tied to non-session cookie
Nov 18, 2025
CSRF where token is not tied to user session
Nov 18, 2025
CSRF where token validation depends on request method
Nov 18, 2025
CSRF where token validation depends on token being present
Nov 18, 2025
CSRF with broken Referer validation
Nov 18, 2025
SameSite Lax bypass via cookie refresh
Nov 18, 2025
SameSite Lax bypass via method override
Nov 18, 2025
SameSite Strict bypass via client-side redirect
Nov 18, 2025
SameSite Strict bypass via sibling domain