Csrf

  1. 1.What CSRF Is & Why It Works
  2. 2.How the Browser Enables It
  3. 3.Anatomy of an Attack
  4. 4.CSRF vs XSS vs SSRF
  5. 5.The Synchronizer Token Pattern
  6. 6.Double-Submit Cookie & Stateless Tokens
  7. 7.SameSite Cookies
  8. 8.Defence in Depth
  9. 9.CSRF in Modern Apps
  10. 10.Testing, Pitfalls & Checklist
Read as One Page
CSRF — Cross-Site Request Forgery — Complete Course
PDF Downloads
CSRF_Course.pdf
Exercise Solutions
csrf1-1_exercise1.txtcsrf1-1_exercise2.txtcsrf1-1_exercise3.txtcsrf1-2_exercise1.txtcsrf1-2_exercise2.txtcsrf1-2_exercise3.txtcsrf1-3_exercise1.txtcsrf1-3_exercise2.txtcsrf1-3_exercise3.txtcsrf1-4_exercise1.txtcsrf1-4_exercise2.txtcsrf1-4_exercise3.txtcsrf1-5_exercise1.txtcsrf1-5_exercise2.txtcsrf1-5_exercise3.txtcsrf1-6_exercise1.txtcsrf1-6_exercise2.txtcsrf1-6_exercise3.txtcsrf1-7_exercise1.txtcsrf1-7_exercise2.txtcsrf1-7_exercise3.txtcsrf1-8_exercise1.txtcsrf1-8_exercise2.txtcsrf1-8_exercise3.txtcsrf1-9_exercise1.txtcsrf1-9_exercise2.txtcsrf1-9_exercise3.txtcsrf1-10_exercise1.txtcsrf1-10_exercise2.txtcsrf1-10_exercise3.txt