Ethical Hacking
  • Introduction to Information Security
    • What is Hacking?
    • Type of Hacking
    • Exercise
    • Uses of Proxy Servers
    • Summary Proxy & VPN
    • Summary
  • Gathering Information About Websites
    • Gathering Information
    • Gathering Targeted Information
  • Google Droks
  • Introduction to Web Architecture and Understanding Common Security Misconceptions
    • Web Servers
    • Web Server Architecture
    • Web Server Architecture Combinations
  • VA & PT
    • OWASP
    • SQL Injection
    • Advanced SQL Injections
    • Burp Suit
      • Client Side Validation Burp Suite Bypass
      • Client Side Validation Burp Suite Bypass
      • GET Based IDOR in URL
      • Post Based IDOR Variant
      • GET Based IDOR in URL
      • Post Based IDOR in URL
      • Download based
  • Arbitrary File Upload Vulnerabilities
    • Server Side Attack
    • Server Side Attack
    • Client Side Attack
  • Understanding Response Headers
    • Event Listeners
  • Fundamentals of Cross Site Scripting (XSS)
    • Temporary XSS
  • Understanding Forced Browsing and Session-Cookie Flaws
    • Forced Browsing
    • Cross Site Request Forgery
    • Open Redirection
  • Dictionary Based Brute Force Attacks
    • Dictionary Based Bruteforcing
    • Logical Bruteforcing
    • PII Leakage Variant
  • Identifying Security is configurations and Exploiting Outdated Web Applications
    • Information Disclosure via Descriptive Messages
    • Default Debug Pages
    • How to guess password for a standard login page
    • Default/Weak Password in Custom CMS
    • Fingerprinting Components with Known Vulnerabilities
    • Finding Exploits for Components with Known Vulnerabilities
    • Default/Weak Password in Public Software
    • Vulnerable Components Installed
    • Vulnerable Components Installed 2
    • Vulnerable Components Installed 3
  • Scanning for Bugs in WordPress and Drupal
    • What is CMS?
    • Variant 1
    • Vulnerable CMS
    • How to Scan Drupal CMS for Known Vulnerabilities?
    • Joomla CMS
  • Automating VAPT and Secure Code Development
    • information gathering
    • Nmap Scans
    • Automating VAPT:
  • POC
    • Recommendations for Documenting a Vulnerability
    • PoC
    • Types of Reports
    • Recommendations for OWASP Top 10 Vulnerabilities
    • Components of a VAPT Report
    • Vulnerability Information (for each vulnerability)
    • Bad Practices to Avoid While Writing a Report
Powered by GitBook
On this page
  1. Understanding Forced Browsing and Session-Cookie Flaws

Cross Site Request Forgery

PreviousForced BrowsingNextOpen Redirection

Last updated 1 year ago

Step 1: Here you need two browsers to perform this attack.

Browser1- Firefox.

Browser2- Firefox Incognito Mode

Step 2: Login to Internshala Trainings and open the Hacking Lab from both the browsers. Go to the hacking challenge (The URL will be different for each user). http://13.232.74.70/Cross-Site-Request-Forgery/Variant-3/

Step 3: Now login to the hacker account in Browser1. Similarly login to the victim account in Browser2. Step 4: Now create an html file (using notpad, sublime text, etc) with the following code (change the IP according to your practice lab):

<html>
<body>
<img src=”http://13.127.238.114/Cross-Site-Request-Forgery/Variant-3/cancel.php?all”>
</body>
</html>

Step 5: Save this file as csrf_poc.html. Now you can send the link to this HTML file to any user, and the moment they open it all their orders will get cancelled.

Step 6: To test, open this HTML in the victim’s browser and his orders will get cancelled in the background.

Step 7: To crosscheck, simply refresh the orders page in the victim’s browser, and all orders will be gone.

Note: Try to learn about the Remediations of CSRF and CSRF tokens.