Results for “cross-site-request-forgery”
2 skills
shulkwisec auth-bypass
Bypass authentication via forced browsing to protected URLs, parameter tampering (authenticated=yes, debug=true, fromtrustIP=true), session ID prediction from linear/incremental cookies, SQL injection on login forms, PHP unserialize() boolean type juggling (b:1 payload), and credential transport over HTTP. Detectable with Burp Suite, OWASP ZAP, WebGoat.
21
24601 surreal-sync
Migrates data from MongoDB, PostgreSQL, MySQL, Neo4j, Kafka, and JSONL into SurrealDB with full and incremental CDC synchronization.
34