Detect modern CSRF vulnerabilities including SameSite bypasses and OAuth RelayState flaws.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-csrf-uphiago
Please help me install this Agent Skill. Skill: hunt-csrf Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-csrf Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-csrf-uphiago
Standard CSRF testing only catches basic missing token flaws, missing modern bypasses like SameSite misconfigurations, JSON CSRF via text/plain enctype, OAuth RelayState validation gaps, and chain-to-account-takeover patterns that lead to high-severity, high-payout bug bounty findings.
Use the hunt-csrf skill to test all state-changing endpoints on your authorized target for CSRF vulnerabilities, prioritize OAuth and account linking flows, and validate any findings with a browser-compatible proof of concept that demonstrates concrete account takeover impact.
High-intent search queries and answers about installing and using this skill.
To find SameSite bypass and JSON CSRF vulnerabilities, test state-changing endpoints for SameSite=Lax sibling subdomain bypasses and Content-Type abuse using text/plain enctype. This approach detects modern CSRF flaws that standard automated scanners overlook during penetration testing.
An OAuth RelayState CSRF flaw is a validation gap in OAuth/SAML flows allowing attackers to hijack the RelayState parameter. This misconfiguration chains directly to full account takeover by forcing victims to link attacker-controlled OAuth/SSO accounts during authorized security assessments.
Yes, you can target third-party dashboards like Grafana for CSRF testing. Prioritize high-impact flows including OAuth/SSO account linking, email change endpoints, and social platform integrations within these dashboards to chain findings directly to full account takeover.
To validate a CSRF bug bounty finding, use browser-compatible proof of concept templates that demonstrate concrete account takeover impact. Apply field-validated detection patterns and impact validation gates aligned with real disclosed reports like GitHub Enterprise and Stripe Dashboard findings.
Standard CSRF testing fails to detect modern web security vulnerabilities because it only catches basic missing token flaws. It misses SameSite misconfigurations, JSON CSRF via text/plain enctype, OAuth RelayState validation gaps, and framework misconfigurations like disabled CSRF middleware.
langbyyiIdentify and exploit CSRF vulnerabilities in web applications, including SameSite bypasses.
mlvpatelValidate bug bounty submissions against a 7-question gate and four pre-submission checks.
EntroVyxAnalyze state-changing endpoints and verify CSRF vulnerabilities with browser-based PoC validation.
langbyyiIdentifies high-severity business logic vulnerabilities in web applications.
