Labs

Lab: CSRF vulnerability with no defenses | Web Security AcademyWebSecAcademy

Lab: CSRF where token validation depends on request method | Web Security AcademyWebSecAcademy

Lab: CSRF where token validation depends on token being present | Web Security AcademyWebSecAcademy

Lab: CSRF where token is not tied to user session | Web Security AcademyWebSecAcademy

Lab: CSRF where token is tied to non-session cookie | Web Security AcademyWebSecAcademy

Lab: CSRF where token is duplicated in cookie | Web Security AcademyWebSecAcademy

Lab: CSRF where Referer validation depends on header being present | Web Security AcademyWebSecAcademy

Lab: CSRF with broken Referer validation | Web Security AcademyWebSecAcademy