Advanced Usage

XSRFProbe is a toolkit intended to be highly flexible and customisable. Everything the scanner does can be controlled via the config.py configuration file.

Understanding the Workflow

XSRFProbe has various checks for detecting whether an endpoint is vulnerable to CSRF attacks.

Types of Checks:

Following are the various checks XSRFProbe executes before declaring any endpoint as vulnerable.

• Origin Based Checks - Checks on whether the site validates Cross-Origin requests.
• Referer Based Checks - Checks on whether the site validates Referer-based requests.
• Origin Based Checks - Checks whther the site validates Origin-based requests.