Skip to main content

Posts

Showing posts from January, 2017

Google form $$$ CSRF vulnerability

Bug discovered: 26th December 2016.                Research time: 8:30 p.m - 10:00 p.m                          Earn more by display ads on blog with  Lithific Ads CSRF is an  abbreviation for Cross-site Request Forgery.  Web applications issue anti-CSRF tokens when a user requests for actions like Submitting a form , so that the request originates exclusively from that domain. This vulnerability comes into play when the server is not validating the anti-CSRF tokens, through this vulnerability you can make a user perform some actions even though he/she didn't intend to do that. Want to get icons for app Development Here  it's  https://www.iconfinder.com/yaswanth-mangalagiri https://www.iconfinder.com/iconsets/movie-53 https://www.iconfinder.com/iconsets/office-504 https://www.iconfinder.com/iconsets/security-259 I wrote a HTML code for submitting the form.  <html> <form action="[url]" target="_self" method="POST" id="[form-sp