[{"data":1,"prerenderedAt":292},["ShallowReactive",2],{"announcement":3,"i-tabler:sun":11,"i-tabler:moon":16,"i-tabler:menu-2":18,"i-tabler:x":20,"i-simple-icons:youtube":22,"i-simple-icons:github":24,"i-simple-icons:x":26,"i-simple-icons:linkedin":28,"i-tabler:arrow-up-right":31,"post-csrf-automate-vulnerability-testing":33,"post-nav-csrf-automate-vulnerability-testing":278,"video-csrf-automate-vulnerability-testing":273,"i-tabler:copy":290},{"startsAt":4,"endsAt":5,"scramble":6,"cta":7,"message":10},"2026-10-13","2026-11-30","Cache Poisoning:",{"href":8,"label":9},"\u002Fcache-poisoning-the-cache-you-cant-purge","Read it","The cache you can't purge.",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":15},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":23},"\u003Cpath fill=\"currentColor\" d=\"M23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":25},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":27},"\u003Cpath fill=\"currentColor\" d=\"M14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":29,"hidden":30},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M17 7L7 17M8 7h9v9\"\u002F>",{"id":34,"title":35,"body":36,"categories":263,"coverImage":267,"date":268,"description":269,"draft":14,"extension":270,"meta":271,"navigation":30,"noindex":14,"path":272,"readingTime":273,"seo":274,"slug":275,"stem":275,"updatedAt":276,"youtubeId":273,"__hash__":277},"blog\u002Fcsrf-automate-vulnerability-testing.md","CSRF - Automate Vulnerability Testing 🛡️🔍",{"type":37,"value":38,"toc":252},"minimark",[39,42,50,64,72,77,92,97,133,138,158,164,167,172,185,190,197,202,208,213,219,224,230,236,239,245,248],[40,41],"post-media",{},[43,44,46],"h2",{"id":45},"introduction",[47,48,49],"strong",{},"Introduction",[51,52,53,54,63],"p",{},"In the ever-evolving field of cybersecurity, automating vulnerability testing has become crucial for efficiency and effectiveness. Following our previous deep dives into XSS and SQL injection automation, today we focus on Cross-Site Request Forgery (CSRF) vulnerabilities. In this tutorial, we'll leverage Burp Suite and a powerful Python tool, ",[55,56,62],"a",{"href":57,"rel":58,"target":61},"https:\u002F\u002Fgithub.com\u002Fhaqqibrahim\u002FProject-Forgery?utm_source=amrelsagaei.com&utm_medium=referral",[59,60],"noopener","noreferrer","_blank","Project Forgery",", to automate CSRF vulnerability testing. Let’s get started! 🚀",[43,65,67],{"id":66},"project-forgery",[55,68,70],{"href":57,"rel":69,"target":61},[59,60],[47,71,62],{},[73,74,76],"h4",{"id":75},"installation","Installation",[51,78,79,80,85,86,91],{},"To begin using ",[55,81,83],{"href":57,"rel":82,"target":61},[59,60],[47,84,62],{},", ensure you have Python installed on your machine. If you haven't installed Python yet, download it from ",[55,87,90],{"href":88,"rel":89,"target":61},"https:\u002F\u002Fwww.python.org\u002Fdownloads\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[59,60],"here",".",[51,93,94],{},[47,95,96],{},"Clone the Project Forgery repository from GitHub:",[98,99,104],"pre",{"code":100,"language":101,"meta":102,"className":103,"style":102},"git clone https:\u002F\u002Fgithub.com\u002Fhaqqibrahim\u002FProject-Forgery.git\ncd project-forgery\n","bash","","shiki shiki-themes vitesse-dark vitesse-light",[105,106,107,123],"code",{},[108,109,112,116,120],"span",{"class":110,"line":111},"line",1,[108,113,115],{"class":114},"swzfi","git",[108,117,119],{"class":118},"sRRDT"," clone",[108,121,122],{"class":118}," https:\u002F\u002Fgithub.com\u002Fhaqqibrahim\u002FProject-Forgery.git\n",[108,124,126,130],{"class":110,"line":125},2,[108,127,129],{"class":128},"s6_DI","cd",[108,131,132],{"class":118}," project-forgery\n",[51,134,135],{},[47,136,137],{},"Install the required dependencies:",[98,139,141],{"code":140,"language":101,"meta":102,"className":103,"style":102},"pip3 install -r requirements.txt\n",[105,142,143],{},[108,144,145,148,151,155],{"class":110,"line":111},[108,146,147],{"class":114},"pip3",[108,149,150],{"class":118}," install",[108,152,154],{"class":153},"se4ZP"," -r",[108,156,157],{"class":118}," requirements.txt\n",[73,159,161],{"id":160},"usage",[47,162,163],{},"Usage",[51,165,166],{},"Once you have Project Forgery installed, you can start using it to automate CSRF testing.",[51,168,169],{},[47,170,171],{},"Run the main script:",[98,173,175],{"code":174,"language":101,"meta":102,"className":103,"style":102},"python3 csrf_script.py\n",[105,176,177],{},[108,178,179,182],{"class":110,"line":111},[108,180,181],{"class":114},"python3",[108,183,184],{"class":118}," csrf_script.py\n",[51,186,187],{},[47,188,189],{},"POST Request Usage:",[51,191,192],{},[193,194],"img",{"alt":195,"src":196},"project-forgery-post-request-usage","\u002Fimages\u002Fblog\u002Fcsrf-automate-vulnerability-testing\u002Fproject-forgery-post-request-usage.png",[51,198,199],{},[47,200,201],{},"GET Request Usage:",[51,203,204],{},[193,205],{"alt":206,"src":207},"project-forgery-project-forgery","\u002Fimages\u002Fblog\u002Fcsrf-automate-vulnerability-testing\u002Fproject-forgery-project-forgery.png",[51,209,210],{},[47,211,212],{},"POST Request Exploit Script:",[51,214,215],{},[193,216],{"alt":217,"src":218},"project-forgery-post-request-exploit-script","\u002Fimages\u002Fblog\u002Fcsrf-automate-vulnerability-testing\u002Fproject-forgery-post-request-exploit-script.png",[51,220,221],{},[47,222,223],{},"GET Request Exploit Script:",[51,225,226],{},[193,227],{"alt":228,"src":229},"project-forgery-get-request-exploit-script","\u002Fimages\u002Fblog\u002Fcsrf-automate-vulnerability-testing\u002Fproject-forgery-get-request-exploit-script.png",[73,231,233],{"id":232},"automating-csrf-testing-with-burp-suite",[47,234,235],{},"Automating CSRF Testing with Burp Suite:",[51,237,238],{},"While Project Forgery handles the script-based automation, Burp Suite provides a comprehensive platform for web vulnerability scanning, including CSRF. Together, they form a powerful duo for identifying and exploiting CSRF vulnerabilitiesز",[43,240,242],{"id":241},"conclusion",[47,243,244],{},"Conclusion",[51,246,247],{},"By integrating Project Forgery with Burp Suite, you can streamline your CSRF vulnerability testing process, making it more efficient and thorough. Whether you’re a seasoned security researcher or just starting out, these tools can significantly enhance your testing capabilities. Stay tuned for more tutorials where we explore the depths of web security automation.",[249,250,251],"style",{},"html pre.shiki code .swzfi, html code.shiki .swzfi{--shiki-default:#80A665;--shiki-light:#59873A}html pre.shiki code .sRRDT, html code.shiki .sRRDT{--shiki-default:#C98A7D;--shiki-light:#B56959}html pre.shiki code .s6_DI, html code.shiki .s6_DI{--shiki-default:#B8A965;--shiki-light:#998418}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html pre.shiki code .se4ZP, html code.shiki .se4ZP{--shiki-default:#C99076;--shiki-light:#A65E2B}",{"title":102,"searchDepth":253,"depth":253,"links":254},3,[255,256,262],{"id":45,"depth":125,"text":49},{"id":66,"depth":125,"text":62,"children":257},[258,260,261],{"id":75,"depth":259,"text":76},4,{"id":160,"depth":259,"text":163},{"id":232,"depth":259,"text":235},{"id":241,"depth":125,"text":244},[264,265,266],"Bug Bounty","Linux","Penetration Testing","\u002Fimages\u002Fblog\u002Fcsrf-automate-vulnerability-testing\u002Fcsrf.jpg","2024-05-23","Automate cross-site request forgery testing with Burp Suite and Project Forgery, a Python tool for generating and validating CSRF proof-of-concepts at scale.","md",{},"\u002Fcsrf-automate-vulnerability-testing",null,{"title":35,"description":269},"csrf-automate-vulnerability-testing","2025-02-05","938jjN_3p9izEuUH3FcvaIv5aNUl_nO7EiuyVK1YGi4",{"older":279,"newer":284,"total":289},{"slug":280,"title":281,"date":282,"position":283},"automate-advanced-xss-with-xsstrike-and-dalfox","🚀 Automate Advanced XSS with XSStrike and Dalfox ⚙️","2024-05-16",46,{"slug":285,"title":286,"date":287,"position":288},"get-your-first-zero-day-right-now","🚀 Get Your First Zero-Day RIGHT NOW!","2024-06-11",44,68,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":291},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M7 9.667A2.667 2.667 0 0 1 9.667 7h8.666A2.667 2.667 0 0 1 21 9.667v8.666A2.667 2.667 0 0 1 18.333 21H9.667A2.667 2.667 0 0 1 7 18.333z\"\u002F>\u003Cpath d=\"M4.012 16.737A2 2 0 0 1 3 15V5c0-1.1.9-2 2-2h10c.75 0 1.158.385 1.5 1\"\u002F>\u003C\u002Fg>",1791941258273]