Client-Side Path Traversal: Exploiting CSRF in Header-Based Auth Scenarios(blog.kulkan.com)
blog.kulkan.com
Client-Side Path Traversal: Exploiting CSRF in Header-Based Auth Scenarios
https://blog.kulkan.com/client-side-path-traversal-exploiting-csrf-in-header-based-auth-scenarios-31c26a1baece
1 comments
In this detailed blog post, Lucas Cebrero Lell walks us through CSPT vulnerabilities and how valuable they are in order to exploit CSRF in apps which have moved away from the typical auth Cookies. There's also a Lab available in github based on React and Node which serves as a sample vulnerable app to try and exploit CSPT.