CSRF Where Token is duplicated in Cookie | 2023

Portswigger Cross-Site Request Forgery Lab Simple Solution | Karthikeyan Nagaraj

CSRF — Introduction:

• Cross-Site Request Forgery (CSRF) is a type of security vulnerability that affects web applications.
• It occurs when an attacker tricks a user’s browser into sending a malicious request to a web application on behalf of the user, often without the user’s knowledge or consent.
• The attacker takes advantage of the trust that a web application has in a user’s browser, exploiting the fact that the browser automatically …

bug bounty cookie csrf hacking portswigger token vulnerability