Name	Name	Last commit message	Last commit date
parent directory ..
CSRF-PoC.html	CSRF-PoC.html
README.md	README.md

Name

Last commit message

Last commit date

CSRF PoC Generator

This simple HTML, is intended to generate forms to perform CSRF.

It can perform using GET, POST or PUT.

How it works

With GET as the HTTP method selected, only the Target URL is necessary. When submitted, a form will be filled out and submitted.

With this two methods, a Content-Type and a Body are required, as well as the Targeted URL.

The Content-Type can be:

application/x-www-form-urlencoded: With this method, the body must be a set of keys and values, like for example key=value&key2=value2. The JavaScript then parses the passed body into the different values of the form.
text/plain: This method, follows the guide in this link.

After filling up the forms, it is submitted.

Using this method it performs the same as the POST, but it adds to the body: _method=PUT.

https://book.hacktricks.wiki/en/pentesting-web/csrf-cross-site-request-forgery.html#method-bypass