Skip to content

Latest commit

 

History

History
66 lines (54 loc) · 1.95 KB

README.md

File metadata and controls

66 lines (54 loc) · 1.95 KB
image

Website   •   Dashboard   •   Docs   •   Roadmap   •   Branding   •   Discord

Advanced CSRF PoC Generator Plugin

A powerful CSRF (Cross-Site Request Forgery) proof of concept generator plugin for Caido. This plugin helps security researchers and penetration testers quickly generate various types of CSRF payloads.

Features

The plugin supports multiple CSRF payload types:

  • Standard HTML Form
  • URL-encoded form
  • Multipart form
  • Plain text form
  • SVG-based CSRF
  • XHR-based CSRF
  • Iframe-based CSRF
  • Meta Refresh CSRF
  • WebSocket CSRF
  • Data URI CSRF

Usage

  1. Install the plugin from Caido's plugin store
  2. Select a request in Caido
  3. Click on the CSRF Generator button
  4. Choose your desired CSRF payload type from the dropdown
  5. The plugin will automatically generate the appropriate CSRF proof of concept code

image

image

Output Example

<!DOCTYPE html>
<html>
<head>
    <title>CSRF PoC</title>
</head>
<body>
    <h3>Standard CSRF PoC</h3>
    <form action="https://caido.io/" method="get">
        <!-- Form parameters will be automatically populated -->
    </form>
</body>
</html>