WEB SECURITYFEATURED
csrf-proc
CSRF vulnerability detection and exploitation framework for web application security testing.
2024-06-20
#Python#Web#CSRF
// why it matters
CSRF bugs hide in state-changing endpoints that lack proper token validation. csrf-proc automates the request analysis that finds them.
// impact
Helps web pentesters detect missing CSRF protections across application endpoints and reproduce them for reports.
// Features
- ✓State-changing endpoint discovery
- ✓Token validation analysis
- ✓CSRF PoC generation
- ✓Request replay for verification
// Tech Stack
PythonrequestsBeautifulSoup
// Install
$ git clone https://github.com/0xCyb3rgh0st/csrf-proc.git && pip install -r requirements.txt
// Usage
$ csrf-proc scan --url https://target.com --cookies session.txt
$ csrf-proc poc --url https://target.com/change-password