CSRF - Lab #4 CSRF where token is not tied to user session | Short Version

In this video, we cover Lab #4 in the CSRF module of the Web Security Academy. This lab's email change functionality is vulnerable to CSRF. It uses tokens to try to prevent CSRF attacks, but they aren't integrated into the site's session handling system. To solve the lab, use your exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: academy.ranakh...
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
CSRF Lab #4 long video: • CSRF - Lab #4 CSRF whe...
Notes.txt document: github.com/rkh...
CSRF theory video: • Cross-Site Request For...
Web Security Academy RUclips Video Series Release Schedule: docs.google.co...
Web Security Academy: portswigger.ne...
Rana's Twitter account: / rana__khalil

[@AJ_23510]

I love how detailed you do these tutorials and the way you use a check list when examining these vulnerabilities! You definitely got my subscription

[@youtubevideostorage3381]

I'm a big big fan of our work. I can't thank you enough for this series. May god bless you with great health and fortune.

[@jaywandery9269]

good work

[@jackhack1234]

Very good explanation. Thank you.

[@exploitplays3835]

amazing explanation

[@FahadAli-ot5kn]

awasome tutorial

[@落珰]

Thank you

[@bradsen]

Hi Rana, thanks for the explanation. May I know why the CSRF Token in Forms or Requests is different from the CSRF Token in chrome browser's Network Tab?

[@bradsen]

I know the answer. The CSRF token in the form is to be used for subsequent requests. Which is reflected in the browser network tab 😂

[@ashiqhussainkumar1391]

Asa lamu elykum Mam,
Do u have any course on security in DJANGO

[@jwd42]

For that we need victim account in real world

[@cybersecurity7577]

انتي فلسطينية ليش كورساتك بل انجليزي 🙂💔

[@cair0_]

6:36 that's a wrong assumption dear since it's refered in the lab that both accounts is yours + why would u make a csrf attack on carlos if u have his credintials ! 😆😆

[@TRASH_Z403]

Thankyou so much ❤