Detect CSRF vulnerabilities in web applications by scanning tokens, cookies, and JSON handling.
npx skills add https://github.com/ersinkoc/security-check --skill sc-csrf
Please help me install this Agent Skill. Skill: sc-csrf Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-csrf Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-csrf
CSRF vulnerabilities allow state-changing actions to be performed without proper authorization when tokens are missing, SameSite cookies are misconfigured, or JSON-based APIs do not validate content-type. This Skill helps identify and remediate those weaknesses across modern web apps.
Detect CSRF vulnerabilities in a web application by identifying missing CSRF tokens, misconfigured SameSite cookies, and unsafe JSON handling.
High-intent search queries and answers about installing and using this skill.
Detect CSRF vulnerabilities by scanning state-changing endpoints like POST, PUT, and DELETE for missing CSRF tokens, misconfigured SameSite cookies, and unsafe JSON content-type handling. This analysis covers session-based apps across major frameworks including Django, Laravel, Spring Security, Express, and ASP.NET.
Cross-site request forgery in JSON APIs occurs when endpoints lack proper content-type validation and anti-forgery checks. Attackers can exploit unsafe JSON handling to perform unauthorized state-changing actions if the API does not verify the request origin or enforce strict content-type policies.
Yes, CSRF detection works with Django, Laravel, Spring Security, Express, and ASP.NET. It assesses framework-specific CSRF defaults and implementation details by scanning for tokens and middleware presence to identify missing protections on state-changing endpoints.
Check SameSite cookie misconfigurations by analyzing cookie headers to ensure they are properly set to prevent cross-origin request forgery. Misconfigured SameSite cookies weaken CSRF defenses by allowing browsers to send authentication cookies with unauthorized cross-site requests.
The best way to find missing CSRF tokens is to scan state-changing POST, PUT, and DELETE endpoints for middleware presence and token validation. This approach identifies token bypasses and cross-origin request vulnerabilities while producing actionable remediation guidance.
webdevtodayjasonIdentifies and remediates web application security vulnerabilities including OWASP Top 10, SQL injection, XSS, and CSRF.
harperaaImplement HMAC-SHA256 CSRF token protection for POST, PUT, and DELETE API routes.
vecearAudit authentication and authorization implementations for session, JWT, CSRF, MFA, and access control flaws.
yunmengyaAudit CSRF protections in PHP applications and generate JSON and Markdown findings.
