skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

hunt-csrf

Analyze state-changing endpoints and verify CSRF vulnerabilities with browser-based PoC validation.

3|1|Updated Jul 2, 2026
Search Tags:#security#auth#csrf#pentest#redteam#bugbounty
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-csrf-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-csrf
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-csrf
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-csrf-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of identifying and verifying complex, modern Cross-Site Request Forgery (CSRF) vulnerabilities that bypass traditional security controls like SameSite cookies and standard token validation.

Core Features & Use Cases

  • Advanced Verification: Provides a rigorous methodology to distinguish between false positives and exploitable CSRF, specifically accounting for browser security models.
  • Chain-to-Impact Focus: Emphasizes high-value attack vectors like Account Takeover (ATO) via OAuth/SSO flows, social account linking, and API mutation.
  • Modern Bypass Techniques: Includes specialized patterns for bypassing Content-Type enforcement, SameSite=Lax restrictions, and Duende BFF antiforgery implementations.

Quick Start

Use the hunt-csrf skill to analyze the state-changing endpoints of the target application and verify if they are susceptible to cross-origin request forgery.

Frequently Asked Questions about hunt-csrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bypass SameSite Lax cookie restrictions when testing for CSRF?▼

Bypassing SameSite Lax cookie restrictions involves exploiting specific browser navigation behaviors or timing windows. This skill details modern bypass patterns and provides manual browser-based PoC construction to verify token handling and cookie attributes.

Can CSRF vulnerabilities be chained with OAuth or SSO flows for account takeover?▼

CSRF vulnerabilities can be chained with OAuth or SSO flows for account takeover. This skill focuses on exploiting social account linking and API mutations to demonstrate impact-driven account takeover and data manipulation.

What is the best way to verify false positives in CSRF pentesting?▼

Verifying false positives in CSRF pentesting requires rigorous methodology accounting for browser security models. This skill provides advanced verification techniques to distinguish false positives from exploitable cross-origin request forgery.

How do I test state-changing API endpoints for CSRF mutations?▼

Testing state-changing API endpoints for CSRF mutations involves analyzing browser-enforced security controls and constructing manual browser-based PoCs. This skill identifies vulnerable endpoints and validates token handling to confirm data manipulation impact.

Does this CSRF hunting approach work against Duende BFF antiforgery implementations?▼

Yes, this CSRF hunting approach works against Duende BFF antiforgery implementations. The skill includes specialized bypass patterns designed to circumvent Duende BFF antiforgery mechanisms and Content-Type enforcement controls.

When do I need manual browser-based PoC construction for CSRF validation?▼

Manual browser-based PoC construction for CSRF validation is required when targeting modern web applications with complex SameSite cookie attributes and token handling. This skill requires manual validation to accurately verify state-changing endpoint vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
langbyyilangbyyi
96

csrf-cross-site-request-forgery

Identify and exploit CSRF vulnerabilities in web applications, including SameSite bypasses.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

csrf

Exploits CSRF vulnerabilities in state-changing web endpoints and generates HTML PoC pages.

Official
Advanced
SkobynSkobyn

hunt-csrf

Identify and exploit CSRF vulnerabilities by analyzing HTTP requests and responses.

Community
Advanced
YlikenYliken
5

csrf-cross-site-request-forgery

Identify and validate CSRF vulnerabilities in state-changing web flows.

Community
Advanced