hunt-csrf

What problem does it solve?

It helps security teams identify Cross-Site Request Forgery (CSRF) flaws that let an attacker perform state-changing actions on behalf of a victim, potentially leading to account takeover, financial impact, or persistent account linking.

Core Features & Use Cases

• CSRF target prioritization: Focuses on high-value flows like account linking/unlinking, OAuth/SAML callback handling, authentication infrastructure, and cross-origin POST JSON APIs.
• Attack surface discovery signals: Pinpoints risky patterns such as missing/weak SameSite cookie attributes, weak Origin/Referer/CORS posture, token staticness or omission, and JSON endpoints that accept cross-origin “simple” requests.
• Reproducible hunting workflow: Provides a step-by-step methodology to validate exploitability quickly and build impact-driven proof-of-concept evidence.

Quick Start

Use the hunt-csrf skill to systematically test an authenticated web application for exploitable CSRF by validating cookie SameSite behavior, CSRF token correctness, and OAuth/SAML or JSON endpoint state changes.