WebApp Sec mailing list archives

Re: CSRF through POST

From: Himanshu Goyal <idhimanshu () gmail com>
Date: Tue, 22 Dec 2009 13:30:35 +0530

Please refer owasp.org

Regards,
Himanshu

On Tue, Dec 15, 2009 at 6:27 AM, Robin Wood <dninja () gmail com> wrote:

Hi
Can anyone point me at any good papers on doing CSRF through POST
parameters? I've found some sites with redirect scripts which help
performing the attack but no good write-ups on different ways to
perform it.

Robin



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now!
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------




This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------

Current thread:

CSRF through POST Robin Wood (Dec 15)
- Re: CSRF through POST arvind doraiswamy (Dec 16)
  - Re: CSRF through POST Robin Wood (Dec 16)
    - RE: CSRF through POST boaz.shunami (Dec 21)
    - Re: CSRF through POST chr1x (Dec 21)
    - Re: CSRF through POST Robin Wood (Dec 22)
    - Re: CSRF through POST Amish Shah (Dec 24)
    - Re: CSRF through POST YGN Ethical Hacker Group (Dec 27)
- Re: CSRF through POST Himanshu Goyal (Dec 22)