Exploits CSRF vulnerabilities in state-changing web endpoints and generates HTML PoC pages.
npx skills add https://github.com/blacklanternsecurity/red-run --skill csrf
Please help me install this Agent Skill. Skill: csrf Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/web/csrf Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill csrf
This Skill helps penetration testers identify and demonstrate Cross-Site Request Forgery (CSRF) vulnerabilities, proving how an attacker could trick a victim's browser into performing unauthorized actions.
Use the csrf skill to assess the state-changing endpoint at https://example.com/update-profile for CSRF vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To generate a CSRF PoC, the Skill analyzes state-changing web application endpoints and creates functional HTML Proof-of-Concept pages demonstrating how an attacker could trick a victim's browser into performing unauthorized actions.
To bypass SameSite cookie attributes during penetration testing, this Skill leverages browser evaluation and cookie inspection to analyze defenses and implements specific SameSite exploit techniques for state-changing attacks.
Yes, you can test for JSON CSRF vulnerabilities using automated browser evaluation. The Skill analyzes state-changing endpoints and generates HTML PoC pages specifically demonstrating JSON CSRF bypass techniques.
Token manipulation for CSRF vulnerabilities works by analyzing defense mechanisms like CSRF tokens through browser evaluation and curl. The Skill generates HTML PoC pages demonstrating various token bypass techniques against web applications.
To verify if Referer and Origin header validation prevents CSRF attacks, the Skill analyzes these defense mechanisms using curl and browser evaluation, generating PoC pages to test if the validation can be bypassed.
YukiIto1999Detect CSRF protections and generate PoC payloads for web applications.
EntroVyxValidate CORS misconfigurations for unauthorized credentialed access to sensitive data.
jokken79Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.
zebbernDetect, exploit, and bypass filters for Cross-Site Scripting and HTML injection vulnerabilities in web applications.
