Lab 1.8: CSRF where Referer validation depends on header being present | Portswigger LAB!!!

This lab's email change functionality is vulnerable to CSRF. It attempts to block cross domain requests but has an insecure fallback.

To solve the lab, use your exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address.

You can log in to your own account using the following credentials: wiener:peter

#techeducation #onlinesafety #digitalsafety #cybersecurityexpert #programming #linux #kalilinux #python #dataprotection #cybercrime #cybersecuritytips #ethicalhacker #pentesting #ransomware