xsrf

There are 2 repositories under xsrf topic.

• gorilla / csrf

  Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

  csrf-protectiongorillamiddlewaregolangsecuritycsrfxsrfcsrf-tokensgogorilla-web-toolkit
  Language:Go 995

• 0xInfection / XSRFProbe

  The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

  csrfcrawlercsrf-attackstoken-generationcsrf-scannercrafted-tokensspidercsrf-tokenscsrf-pocxsrfaudit
  Language:Python 917

• s0md3v / Bolt

  CSRF Scanner

  csrfcsrf-scannerxsrf
  Language:Python 495

• fy0 / fpage

  Tornado project generator. Start a project with tornado, mako/jinjia2 and sqlalchemy/peewee in a minute.

  peeweetornadosqlalchemymakoxsrfpythonfpage
  Language:Python 231

• dunglas / DunglasAngularCsrfBundle

  Automatic CSRF protection for JavaScript apps using a Symfony API

  symfonysymfony-bundlecsrfcsrf-protectioncsrf-attacksxsrfphpangularjsangularreactaxiosvuejquery
  Language:PHP 149

• msanvarov / php-security

  🔐 basics on making php applications secure

  phpphp-securitysql-injectionxss-attacksexposing-directorieserrorsxsrfssl-certificates
  Language:PHP 19

• Laragear / Poke

  Keep your forms alive, avoid `TokenMismatchException` by gently poking your Laravel app.

  laravelphpcsrfxsrf
  Language:PHP 17

• dneustadt / DneustadtCsrfCookieBundle

  Symfony bundle that provides Cross Site Request Forgery (CSRF or XSRF) protection for client-side applications

  ajaxangularaxioscsrfreactsecurityvuexhrxsrf
  Language:PHP 12

• cluemediator / secure-auth-api-nodejs

  Create secure authentication REST API in Node.js

  api-nodejssecure-loginloginauthenticationcookiecsrfrandom-tokensdotenvxsrf
  Language:JavaScript 10

• cluemediator / secure-login-app-reactjs

  Implement secure login application in React using REST API

  reactjsloginlogin-authauthenticationcsrfxsrfrest-api
  Language:JavaScript 10

• LeoniePhiline / axum-csrf-sync-pattern

  A crate built on top of `axum-sessions`, implementing the CSRF Synchronizer Token Pattern

  apiaxumcorscsrfhttpmiddlewaresecuritysynchronizer-token-patternxsrf
  Language:Rust 10

• atayahmet / react-axios-token-provider

  React Axios Token Provider package is a make easy what repetitive processes.

  access-tokencsrf-tokenmanagementproviderreactreact-nativerefresh-tokenxsrf
  Language:TypeScript 4

• 42BV / redux-mad-authentication

  A library which stores login credentials in Redux to allow a user to login to a Spring Boot application.

  reduxauthenticationspring-mvcxsrfspring-securityfetchloginlogout
  Language:TypeScript 3

• osya / ASPNetCoreAngular2Payments

  ASP.NET Core MVC 2.0 & Angular 4 project for testing payments via Stripe & Braintree

  csharpaspnetcoremvcstripe-checkoutstripe-elementsbraintreewebpack2autoprefixerxsrfangular4travis-cinpmappveyordocker-composedockerchrome-headless
  Language:C# 3

• Aryia-Behroziuan / Cross-site-request-forgery-CSRF-or-XSRF-

  Cross-site request forgery is a common malicious exploit of websites. It occurs when unauthorised commands are transmitted from a user that a web application trusts. The user is usually logged into the website, so they have a higher level of privileges, allowing the hacker to transfer funds, obtain account information or gain access to sensitive information. There are many ways for hackers to transmit forged commands including hidden forms, AJAX, and image tags. The user is not aware that the command has been sent and the website believes that the command has come from an authenticated user. The main difference between an XSS and CSRF attack is that the user must be logged in and trusted by a website for a CSRF wesbite hacking attack to work. Website owners can prevent CSRF attacks by checking HTTP headers to verify where the request is coming from and check CSRF tokens in web forms. These checks will ensure that the request has come from a page inside the web application and not an external source.

  website-hacking-methodscsrfxsrf
  2

• ianwalter / express-csrf

  Cross-Site Request Forgery (CSRF) middleware for Express

  csrfexpressmiddlewarexsrf
  Language:JavaScript 2

• catb0t / anticsrf

  super simple, single-file anti-cross-site request forgery (CSRF) module for server APIs

  csrfxsrfanticsrfserver-sidepython3
  Language:Python 1

• daggerok / spring-security-examples

  This repository contains spring-security playgroung projects https://daggerok.github.io/spring-security-examples/

  spring-bootspring-securityspring-mvccsrfcsrf-protectioncsrf-tokensxsrfoauth2oauth-githuboauth2-facebook-loginoauth2-githubclient
  Language:Java 1

• epomatti / csrf-attack

  Cross-Site Request Forgery (CSRF) attack

  cross-site-request-forgeryjavascriptnodesecurityxsrfcsrfsession-ridinggogolang
  Language:Go 1

• jolmari / boilerplate-separated-aspnet-core-angular

  Sample Angular-enabled ASP.NET Core application with separated backend and frontend structure

  aspnetcorecsharpangularangular-clixunithttpsxsrfcsrfspaseparation-logicseparatedboilerplate
  Language:TypeScript 1

• osya / ASPNetCoreAngular2YoExample

  JWT-token registration app based on Angular 4 & ASP.NET Core 2.0

  asp-net-coretoken-autheticationjwt-authenticationasp-net-identitycsharpentity-framework-corepostgresqldockerdocker-composetypescriptbootstrap3web-api-2xsrfwebpack2angular4server-side-renderingtravis-cinpmappveyorchrome-headless
  Language:C# 1

• OWASP / www-project-csrfprotector

  OWASP CSRFProtector Project Landing Page

  csrfxsrfwebsecurityowasp
  Language:HTML 1

• rjtch / book-library

  Sample Rest-full API with ui in angular generated using openapi and backend in golang.

  rest-apigolang-applicationxsrfcookiecookie-sessionopenapikubernetes-deploymentopenshiftdockerjwt-authenticationzipkin
  Language:Go 1

• ap-t / chattr-blog

  A simple blog web app with emphasis on web security

  sql-injectionxsrfxss
  Language:PHP 0

• itanex / AntiForgeryMiddleware

  Antiforgery Middleware to solve the problem of client based web applications

  asp-net-corexsrfangular
  Language:C# 0

• rvelhote / sniffr

  A full web application that allows you to perform HTTP requests on demand.

  pythonflaskweb-snifferdockerwsgiangularjsxsrf
  Language:Python 0

• vuro-framework / csrf-protector

  [READ ONLY] Subtree split of the Vuro Csrf Protector component (see vuro-framework/vuro-framework)

  phpcomponentcsrf-protectiontokensxsrfvuro
  Language:Hack 0

• aadarshkarumathil / Bumblr_pentest_report

  Penetration testing report for BUMBLR (a webapp built using DVWA). Part of penetration testing clsswork

  sql-injectionxss-exploitationxssxsrfpenetration-testing

• arruw / fri-1819-isp-seminar

  FRI - 2018/2019 - Information Security and Privacy - Mitigating Cross-Site Request Forgery Attacks

  csrfxsrfxsfroauth2
  Language:TeX

• onodera-sf / AspNetCoreValidateAntiforgeryToken

  ASP.NET Core でクロスサイトリクエストフォージェリ (XSRF/CSRF) 対策を行うサンプルです。

  tipsasp-net-corexsrfcsrfantiforgery
  Language:HTML

• trungx / csrf_demo

  Đề tài thực tập CSRF 2017

  csrfxsrf
  Language:PHP