WebApp Sec mailing list archives

CSRF through POST

From: Robin Wood <dninja () gmail com>
Date: Tue, 15 Dec 2009 00:57:48 +0000

Hi
Can anyone point me at any good papers on doing CSRF through POST
parameters? I've found some sites with redirect scripts which help
performing the attack but no good write-ups on different ways to
perform it.

Robin



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------

Current thread:

CSRF through POST Robin Wood (Dec 15)
- Re: CSRF through POST arvind doraiswamy (Dec 16)
  - Re: CSRF through POST Robin Wood (Dec 16)
    - RE: CSRF through POST boaz.shunami (Dec 21)
    - Re: CSRF through POST chr1x (Dec 21)
    - Re: CSRF through POST Robin Wood (Dec 22)
    - Re: CSRF through POST Amish Shah (Dec 24)
    - Re: CSRF through POST YGN Ethical Hacker Group (Dec 27)
- Re: CSRF through POST Himanshu Goyal (Dec 22)