pentest-request-forgery

To test for CSRF vulnerabilities on state-changing endpoints, use this Skill to systematically analyze attack surfaces and craft malicious requests. It provides exploitation techniques and detection checklists to verify if state-changing actions lack proper anti-CSRF protections.

HTTP request smuggling is an attack that exploits discrepancies in how front-end and back-end servers interpret request boundaries. This Skill helps identify smuggling attack surfaces and provides methods to craft malicious requests for exploitation during web application penetration testing.

To detect and exploit CRLF injection, this Skill analyzes web application attack surfaces for common injection patterns. It provides exploitation techniques to craft malicious requests leveraging carriage return and line feed characters, along with detection checklists for systematic testing.

Yes, you can use this Skill for impact assessment of request forgery vulnerabilities. It leverages real-world cases to provide context and evaluate the severity of CSRF, HTTP request smuggling, and CRLF injection findings discovered during your penetration test.

The best way to systematically check web applications for request forgery attack surfaces is using this Skill's detection checklists. It analyzes patterns for CSRF, HTTP smuggling, and CRLF injection, providing structured exploitation techniques for comprehensive vulnerability assessment.