skills.rest
sseshachala
sseshachalaCOMMUNITY
Explore all skills by this author →
GitHub

hunt-csrf

Identify and exploit CSRF vulnerabilities across OAuth, GraphQL, and REST endpoints.

Updated Jun 5, 2026
Search Tags:#vulnerability#oauth#graphql#web-security#csrf#bug-bounty#csrf-token
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-csrf-sseshachala
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-csrf
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/hunt-csrf
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-csrf-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CSRF remains a critical web-security risk that lets attackers perform state-changing actions in victims' sessions without their consent; this Skill consolidates modern CSRF hunting patterns, references, and practical tests into a single workflow.

Core Features & Use Cases

  • Comprehensive detection signals across URL patterns, response headers, and DOM artifacts.
  • Step-by-step hunting methodology to map endpoints, test token handling, and verify bypass scenarios in real-world apps.
  • Realistic PoC templates and detection patterns to validate CSRF risks in OAuth, GraphQL, and API endpoints.

Quick Start

From a logged-in user context, identify a state-changing endpoint exposed to CSRF and run a minimal PoC to confirm whether a cross-origin request can trigger the action.

Frequently Asked Questions about hunt-csrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find CSRF vulnerabilities in modern web applications with OAuth and GraphQL?▼

Hunt CSRF flaws by mapping state-changing endpoints across REST, GraphQL, and OAuth callbacks, testing token validation, and verifying cross-origin bypass scenarios to simulate real-world attacks safely.

What is the best way to test CSRF bypass patterns on JSON endpoints?▼

Test CSRF bypass patterns on JSON endpoints by manipulating content-type headers and analyzing token enforcement to confirm if cross-origin requests trigger unauthorized state-changing actions.

How do I perform a CSRF PoC on multi-subdomain architectures?▼

Perform a CSRF PoC on multi-subdomain architectures by exploiting third-party integrations and OAuth callbacks to validate cross-origin state-changing actions against relaxed SameSite cookie configurations.

Can I use this CSRF hunting methodology for authorized red-team testing?▼

Yes, this methodology supports safe, authorized red-team testing by providing endpoint mapping, token handling verification, and realistic PoC templates to validate CSRF risks across OAuth and API endpoints.

Why does SameSite cookie attribute bypass lead to CSRF in third-party integrations?▼

SameSite bypass leads to CSRF in third-party integrations because permissive cookie configurations allow cross-origin requests to authenticate automatically, enabling attackers to exploit OAuth callbacks and trigger state-changing actions.

Related Skills

Explore More Software Engineering Skills→
LeoWSY-hashblueLeoWSY-hashblue
3

reconnaissance

Aggregate subdomains, ports, endpoints, and APIs into structured inventories.

Community
Intermediate
langbyyilangbyyi
96

cors-cross-origin-misconfiguration

Identify exploitable CORS misconfigurations enabling cross-origin theft of authenticated user data.

Community
Intermediate
blacklanternsecurityblacklanternsecurity
253

csrf

Exploits CSRF vulnerabilities in state-changing web endpoints and generates HTML PoC pages.

Official
Advanced
YukiIto1999YukiIto1999

performing-csrf-attack-simulation

Detect CSRF protections and generate PoC payloads for web applications.

Community
Advanced