CSRF - Lab #1 CSRF vulnerability with no defenses | Long Version
In this video, we cover Lab #1 in the CSRF module of the Web Security Academy. This lab's email change functionality is vulnerable to CSRF. To solve the lab, we craft some HTML that uses a CSRF attack to change the viewer's email address and upload it to to our exploit server.
▬ 🌟 Video Sponsor 🌟 ▬▬▬▬▬▬▬▬▬▬
Sign up to Intigriti: https://go.intigriti.com/ranakhalil (affiliate link)
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-...
▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:13 - Intigriti sponsorship (https://go.intigriti.com/ranakhalil)
01:07 - Navigation to the exercise
01:51 - Understand the exercise and make notes about what is required to solve it
03:00 - Exploit the lab using Burp Suite Pro
12:58 - Script the exploit (without Burp Suite Pro)
23:00 - Summary
23:16 - Thank You
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
CSRF Theory video (previous video): • Cross-Site Request Forgery (CSRF) | C...
HTML script: https://github.com/rkhal101/Web-Secur...
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Youtube Video Series Release Schedule: https://docs.google.com/spreadsheets/...
Web Security Academy: https://portswigger.net/web-security/...
Rana's Twitter account: / rana__khalil