skills.rest
elementalsouls
elementalsoulsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-csrf

Hunt CSRF vulnerabilities across modern web applications with chain-based bypass testing.

3.3k|507|Updated May 5, 2026
Search Tags:#oauth#web-security#poc#csrf#vulnerability-testing#bug-bounty#same-site
One-click install
npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill hunt-csrf-elementalsouls
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-csrf
Source: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/hunt-csrf
Command: npx skills add https://github.com/elementalsouls/Claude-BugHunter --skill hunt-csrf-elementalsouls

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CSRF vulnerabilities can enable unauthorized state-changing actions in web apps that lead to account takeovers and data exposure. This skill provides a structured methodology to identify, test, and chain CSRF weaknesses across modern platforms, including OAuth flows, GraphQL mutations, and WebSocket interactions.

Core Features & Use Cases

  • Threat-focused CSRF hunting methodology covering token handling, SameSite attributes, RelayState validation, and JSON/text CSRF variants.
  • Real-world use cases across enterprise apps (OAuth linking, email changes, admin actions) to illustrate impact and remediation.
  • Step-by-step PoC templates and detection patterns to reproduce findings in a safe, authorized context.

Quick Start

Describe your target and CSRF scenario to start hunting modern CSRF vectors with chain-focused tests.

Frequently Asked Questions about hunt-csrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find CSRF vulnerabilities in OAuth flows and GraphQL mutations?▼

Testing for CSRF vulnerabilities requires knowledge of CSRF patterns, access to test accounts, and a methodology including token checks, header validation, content-type enforcement, and PoC generation to reproduce findings safely.

What is a CSRF chain-based bypass and how does it enable account takeover?▼

CSRF chain-based bypasses combine SameSite misconfigurations, token binding flaws, and 3rd-party integrations to bypass protections across REST APIs or WebSocket interactions, enabling unauthorized state-changing actions and account takeovers.

How do I test SameSite cookie misconfigurations for CSRF bypasses?▼

Evaluate SameSite cookie attributes alongside token handling and header validation to identify chain-based CSRF bypasses across enterprise web applications, particularly those with OAuth flows and 3rd-party integrations.

Does this CSRF testing methodology work with WebSocket interactions and REST APIs?▼

The methodology applies to enterprise web apps with WebSocket interactions, REST APIs, GraphQL mutations, and OAuth flows, covering SameSite misconfigurations, token binding flaws, and 3rd-party integrations for comprehensive CSRF hunting.

How do I generate a proof of concept for a JSON or text CSRF vulnerability?▼

Use step-by-step PoC templates and detection patterns covering JSON and text CSRF variants, including token checks and content-type enforcement, to reproduce findings in a safe, authorized testing context.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

redteam-mindset

Provides an operational framework for red-team engagements with structured decision-making and validation.

Community
Advanced
zebbernzebbern
5

markdown-report

Generate markdown vulnerability reports with a strict template.

Community
Advanced
SkobynSkobyn

hunt-csrf

Identify and exploit CSRF vulnerabilities by analyzing HTTP requests and responses.

Community
Advanced
EntroVyxEntroVyx
3

recon-plumbing

Automate reconnaissance of WordPress plumbing sites for PII exposure and misconfigurations.

Community
Intermediate