anti-csrf-token-from-referer
Token replacer
Automatically replaces anti-CSRF tokens with values retrieved from the referer of an original request.
3 stars
10 watching
7 forks
Language: Python
last commit: over 4 years ago Related projects:
| Repository | Description | Stars |
|---|---|---|
 sentinel-one/cobaltstrikeparser | Deciphers CobaltStrike Beacon configurations from various formats. | 1,028 |
 asaafan/csurfer | An extension that bypasses anti-CSRF tokens in web applications | 18 |
 0xinfection/xsrfprobe | A toolkit designed to test and exploit Cross-Site Request Forgery vulnerabilities in websites. | 1,116 |
| compasssecurity/burp-copy-request-response | An extension for Burp Suite that simplifies copying request and response data for report generation. | 27 |
 referefref/canarytokendetector | A script to detect and remove canary tokens from files. | 19 |
 mozilla/django-session-csrf | An alternative implementation of Django's CSRF protection that does not use cookies. | 111 |
 gorilla/csrf | A middleware library providing protection against malicious requests through the use of tokens. | 1,062 |
 pillarjs/understanding-csrf | An explanation of how CSRF attacks work and how to mitigate them in web applications. | 1,402 |
 0ang3el/easycsrf | An extension that automatically modifies certain HTTP requests to reveal potential CSRF vulnerabilities in web applications. | 160 |
 dariusztytko/token-reverser | Tools to generate words lists and crack MD5 hashed security tokens from user data | 109 |
 justinas/nosurf | Protects against Cross-Site Request Forgery (CSRF) attacks in web applications by verifying user input | 1,603 |
 eremit4/cs-discovery | Detects malicious servers in network traffic by analyzing encoded byte patterns | 20 |
 trustedsec/hate_crack | Automates password cracking using hashcat | 1,675 |
 te-k/cobaltstrike | Detects and analyzes Cobalt Strike beacons by analyzing HTTP responses and extracting configuration information. | 266 |
 vapor-community/csrf | Protects against cross-site request forgery attacks in web applications by adding authentication information to each request using sessions. | 41 |