Identifies CSRF vulnerabilities and maps chain-to-ATO attack patterns in web apps.
npx skills add https://github.com/chatbotkit/rook --skill hunt-csrf-chatbotkit
Please help me install this Agent Skill. Skill: hunt-csrf Source: https://github.com/chatbotkit/rook/tree/main/skills/hunt-csrf Command: npx skills add https://github.com/chatbotkit/rook --skill hunt-csrf-chatbotkit
Hunting CSRF vulnerabilities and mapping chain-to-ATO patterns across web apps, consolidating known bug-bounty findings into practical hunting guidance.
Describe how to start CSRF hunting in a test target environment.
High-intent search queries and answers about installing and using this skill.
To find CSRF vulnerabilities, you map state-changing endpoints across OAuth, GraphQL, and API surfaces by analyzing cookie handling, token management, and RelayState misconfigurations to identify exploitable gaps. This process relies on understanding SameSite cookies and common token flaws.
A chain-to-ATO pattern in CSRF hunting links a cross-site request forgery flaw to an account takeover by exploiting misconfigured state-changing endpoints. It leverages insecure OAuth flows, RelayState issues, and weak token validation to fully compromise user sessions.
To start CSRF hunting, you follow a repeatable methodology using concrete payloads, detection signals, and verification steps against your test target. You map API and GraphQL endpoints while analyzing cookie handling to confirm exploitable gaps.
Yes, this CSRF hunting approach is built for bug bounty hunters and pentesters evaluating web apps and SaaS platforms. It maps vulnerabilities across modern API endpoints and consolidates known bug-bounty findings into practical hunting guidance.
Understanding SameSite cookies is required for CSRF research because they dictate whether browsers send cookies on cross-origin requests. Analyzing this behavior alongside CSRF tokens and RelayState issues reveals exploitable gaps in web application session validation.
CSRF hunting limitations arise when modern web applications enforce strict SameSite cookie policies and robust token validation. Hunting requires identifying specific misconfigurations in OAuth or RelayState, as properly implemented defenses prevent cross-site request forgery.
jcastillotxIntercept and analyze HTTP traffic with Burp Suite proxy tools.
uphiagoDetect modern CSRF vulnerabilities including SameSite bypasses and OAuth RelayState flaws.
YlikenIdentify and validate CSRF vulnerabilities in state-changing web flows.
naporin0624Analyzes HTML forms for CSRF tokens, insecure actions, missing validation, hidden field exposure and misconfigurations, generating text or JSON reports.
