Pasindu's Blog
Search
Search
Dark mode
Light mode
Explorer
Home
❯
PortSwigger Labs
❯
Cross site request forgery (CSRF)
Cross-site request forgery (CSRF)
Jun 22, 2026
1 min read
Cross-site request forgery (CSRF) - PortSwigger Practice Lab
11 items under this folder.
Jul 05, 2026
CSRF vulnerability with no defenses
PortSwigger
Jul 05, 2026
CSRF where Referer validation depends on header being present
PortSwigger
Jul 05, 2026
CSRF where token is duplicated in cookie
PortSwigger
Jul 05, 2026
CSRF where token is not tied to user session
PortSwigger
Jul 05, 2026
CSRF where token is tied to non-session cookie
PortSwigger
Jul 05, 2026
CSRF where token validation depends on request method
PortSwigger
Jul 05, 2026
CSRF where token validation depends on token being present
PortSwigger
Jul 05, 2026
CSRF with broken Referer validation
PortSwigger
Jul 05, 2026
SameSite Lax bypass via cookie refresh
PortSwigger
Jul 05, 2026
SameSite Lax bypass via method override
PortSwigger
Jul 05, 2026
SameSite Strict bypass via client-side redirect
PortSwigger
