CSRF Bypass

Discussion in 'Песочница' started by Octavian, 16 Sep 2017.

  1. Octavian

    Octavian Elder - Старейшина

    Joined:
    8 Jul 2015
    Messages:
    506
    Likes Received:
    101
    Reputations:
    25
    Проверяется Referer при CSRF атаке и ничего не срабатывает как пройти через такую защиту?
    Code:
    Host: site.md
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3
    Accept-Encoding: gzip, deflate, br
    Content-Type: application/x-www-form-urlencoded
    Content-Length: 0
    Referer: http://localhost/1.html
    Cookie:
    Connection: keep-alive
    Upgrade-Insecure-Requests: 1
     
  2. tabacci

    tabacci New Member

    Joined:
    1 Aug 2017
    Messages:
    4
    Likes Received:
    2
    Reputations:
    0
    без сценария непонятно, на что CSRF и откуда берется Referer
     
Loading...
Similar Threads - CSRF Bypass
  1. DescargaR
    Replies:
    2
    Views:
    2,439