CSRF | MINGON

2026

[PLAYBOOK] CSRF 진단 CHEAT SHEET
Jun 27

[NOTE] PORTSWIGGER - CROSS-SITE REQUEST FORGERY(CSRF) 토픽 정리 및 실습
Jun 26

[WRITE-UP] PORTSWIGGER - CSRF WITH BROKEN REFERER VALIDATION
Jun 25

[WRITE-UP] PORTSWIGGER - CSRF WHERE REFERER VALIDATION DEPENDS ON HEADER BEING PRESENT
Jun 25

[WRITE-UP] PORTSWIGGER - SAMESITE LAX BYPASS VIA COOKIE REFRESH
Jun 25

[WRITE-UP] PORTSWIGGER - SAMESITE STRICT BYPASS VIA SIBLING DOMAIN
Jun 25

[WRITE-UP] PORTSWIGGER - SAMESITE STRICT BYPASS VIA CLIENT-SIDE REDIRECT
Jun 24

[WRITE-UP] PORTSWIGGER - SAMESITE LAX BYPASS VIA METHOD OVERRIDE
Jun 24

[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS DUPLICATED IN COOKIE
Jun 24

[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS TIED TO NON-SESSION COOKIE
Jun 24

[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS NOT TIED TO USER SESSION
Jun 23

[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN VALIDATION DEPENDS ON TOKEN BEING PRESENT
Jun 23

[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN VALIDATION DEPENDS ON REQUEST METHOD
Jun 23

[WRITE-UP] PORTSWIGGER - CSRF VULNERABILITY WITH NO DEFENSES
Jun 23

[WRITE-UP] PORTSWIGGER - CROSS-SITE WEBSOCKET HIJACKING
Jun 12

[WRITE-UP] PORTSWIGGER - EXPLOITING XSS TO BYPASS CSRF DEFENSES
Jun 6