Identify and exploit CSRF vulnerabilities by analyzing HTTP requests and responses.
npx skills add https://github.com/Skobyn/talon --skill hunt-csrf-skobyn
Please help me install this Agent Skill. Skill: hunt-csrf Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-csrf Command: npx skills add https://github.com/Skobyn/talon --skill hunt-csrf-skobyn
This Skill identifies and demonstrates CSRF (Cross-Site Request Forgery) vulnerabilities in web applications, enabling security researchers to exploit them and strengthen application security.
Use the hunt-csrf skill to check for CSRF vulnerabilities in the web application at 'https://example.com'.
High-intent search queries and answers about installing and using this skill.
Detect CSRF vulnerabilities by analyzing HTTP requests and responses to identify missing token validation, weak SameSite cookie attributes, and insecure JSON API patterns. This skill automates the analysis process to pinpoint exploitable cross-site request forgery flaws.
Modern CSRF attack vectors target SameSite cookie attributes, token validation flaws, and JSON API security gaps. Exploitation involves crafting cross-origin requests that bypass these browser protections to execute unauthorized actions on behalf of authenticated users.
Yes, you need curl and grep for command-line execution and analysis. The skill uses these tools to intercept, send, and parse HTTP requests and responses when identifying and exploiting cross-site request forgery vulnerabilities.
Exploit CSRF vulnerabilities in JSON APIs by analyzing HTTP requests and responses to locate missing or weak token validation. You can then craft malicious cross-origin requests that bypass SameSite cookie protections to perform unauthorized actions.
The best way to check for missing CSRF token validation is to analyze HTTP requests and responses using command-line tools like curl and grep. This identifies whether state-changing actions lack anti-CSRF tokens or rely on weak SameSite cookies.
bpnrockstarDetect and demonstrate CSRF vulnerabilities in web applications via HTTP analysis.
utsavthakurIdentify and analyze CSRF vulnerabilities in web applications.
transilienceaiCoordinate web-application reconnaissance to identify attack surfaces.
langbyyiIdentify and exploit CSRF vulnerabilities in web applications, including SameSite bypasses.
