Home (22)
Review (4)
Analysis (4)
Note (8)
PLAYBOOK (6)
WRITE-UP (80)
Tags (100)
2026
[WRITE-UP] PORTSWIGGER - CSRF WITH BROKEN REFERER VALIDATION
Jun 25
[WRITE-UP] PORTSWIGGER - CSRF WHERE REFERER VALIDATION DEPENDS ON HEADER BEING PRESENT
Jun 25
[WRITE-UP] PORTSWIGGER - SAMESITE LAX BYPASS VIA COOKIE REFRESH
Jun 25
[WRITE-UP] PORTSWIGGER - SAMESITE STRICT BYPASS VIA SIBLING DOMAIN
Jun 25
[WRITE-UP] PORTSWIGGER - SAMESITE STRICT BYPASS VIA CLIENT-SIDE REDIRECT
Jun 24
[WRITE-UP] PORTSWIGGER - SAMESITE LAX BYPASS VIA METHOD OVERRIDE
Jun 24
[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS DUPLICATED IN COOKIE
Jun 24
[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS TIED TO NON-SESSION COOKIE
Jun 24
[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN IS NOT TIED TO USER SESSION
Jun 23
[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN VALIDATION DEPENDS ON TOKEN BEING PRESENT
Jun 23
[WRITE-UP] PORTSWIGGER - CSRF WHERE TOKEN VALIDATION DEPENDS ON REQUEST METHOD
Jun 23
[WRITE-UP] PORTSWIGGER - CSRF VULNERABILITY WITH NO DEFENSES
Jun 23