In the following steps we will be automating CSRF testing:
- CSRF is a vulnerability that can be present in both GET and POST method transactions. DVWA offers a good example of a GET method CSRF vulnerability. The application allows the users to update their password by submitting the new value twice via the GET method parameters, as follows:
- Because of a lack of CSRF controls, it is easy to exploit this vulnerability. If a user of the web application can be tricked into accessing a URL with preconfigured values for the password_new and password_conf parameters, an attacker could force the victim to change the password to ...
