Identify and validate CSRF vulnerabilities in cookie-authenticated web endpoints.
npx skills add https://github.com/Q16G/aster --skill csrf-testing-q16g
Please help me install this Agent Skill. Skill: csrf-testing Source: https://github.com/Q16G/aster/tree/main/skills/pentest/csrf-testing Command: npx skills add https://github.com/Q16G/aster --skill csrf-testing-q16g
CSRF testing helps identify and verify cross-site request forgery vulnerabilities in web applications that rely on cookie-based authentication to prevent unauthorized state-changing actions.
Run a controlled security test against a target site with authorized access and follow the steps described to assess CSRF protections.
High-intent search queries and answers about installing and using this skill.
To test for CSRF vulnerabilities in web applications, you target state-changing endpoints relying on cookie authentication, such as password changes or transfers, validating protections and PoC viability with up to eight requests per endpoint.
CSRF penetration testing detects the presence of CSRF protections like tokens, SameSite cookies, and referer or origin checks, while also evaluating potential bypass strategies to confirm if the web application's state-changing operations remain secure.
Yes, you can validate CSRF PoC viability for cookie-authenticated endpoints by running a controlled security test in an authorized testing environment to demonstrate the potential impact of unauthorized actions like data deletions or transfers.
CSRF testing specifically applies to endpoints with state-changing operations that rely on cookies for authentication, meaning endpoints utilizing alternative authentication mechanisms are outside its defined testing scope.
Limitations include requiring an authorized testing environment and supporting a maximum of eight requests per endpoint to confirm protections and PoC viability, restricting large-scale automated scanning.
You need to perform CSRF testing on state-changing operations, such as data modifications or password changes, to ensure that robust token, SameSite cookie, and referer/origin checks prevent unauthorized cross-site requests.
securityfortechDetect and test CSRF vulnerabilities in web applications.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
aivos-xieScans, enumerates, and exploits vulnerabilities in a network using penetration testing tools.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
