CSRF - Lab #7 CSRF where Referer validation depends on header being present | Short Version

In this video, we cover Lab #7 in the CSRF module of the Web Security Academy. This lab's email change functionality is vulnerable to CSRF. This lab's email change functionality is vulnerable to CSRF. It attempts to block cross domain requests but has an insecure fallback. To solve the lab, we use the exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
CSRF Lab #7 long video: https://www.youtube.com/watch?v=IahwvoSgi0s&ab_channel=RanaKhalil
Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/csrf/lab-07/notes.txt
CSRF theory video: https://www.youtube.com/watch?v=7bTNMSqCMI0&ab_channel=RanaKhalil
Web Security Academy Youtube Video Series Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/edit#gid=0
Web Security Academy: https://portswigger.net/web-security/csrf/lab-referer-validation-depends-on-header-being-present
Rana's Twitter account: https://twitter.com/rana__khalil

Видео CSRF - Lab #7 CSRF where Referer validation depends on header being present | Short Version канала Rana Khalil