CSRF Exploitation

[h4ck3r1987]

Hi all,

I have a some query can any one clear my doubts with example.

Q: How can i exploit it  If CSRF Token travel in url on post request ?

[blindfuzzy]

Ummm, GET and POST requests can be easily made through HTML forms, images, script tags etc... I'd worry less about CSRF exploitation if you are asking that question. You need to do some research.

[neoxquick]

here is link:
http://www.mcafee.com/sg/resources/white-papers/wp-csrf-attack-defense.pdf

read it .. i think it can help you ..

bye N

[x40a0e]

If there is a CSRF token (sounds like there is) it may not be possible. If the token is static and does not change across page loads / sessions, then you should be able to exploit it, but if it is a randomly generated dynamic token, you're basically SOL.