Hacking News

Published on March 3rd, 2014 | Post Views: 3,364  Hits

4

CSRFT – Cross Site Request Forgeries (Exploitation) Toolkit

Description

This project has been developed to exploit CSRF Web vulnerabilities and provide you a quick and easy exploitation toolkit. In few words, this is a simple HTTP Server in NodeJS that will communicate with the clients (victims) and send them payload that will be executed using JavaScript. CSRF is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated.“ Combined with social engineering this is a very effective attack tool. Believe it or not, web sites prone to CSRF are very common. If your web developers do not know what „unique web form“ means, you will have to deal with CSRFs eventually.

How to get/use the tool

First, clone it :

$ git clone [email protected]:PaulSec/CSRFT.git

Then, in the directory, launch the server.js :

$ node server.js

Usage will be displayed :

Usage : node server.js <file.json> <port : default 8080>

download CSRFT  more info can be found here

Related Posts

YouTube Scam Lures Eager ‘Doctor Who’ Fans to Reveal Personal Data →

Facebook mass hack last month was so totally overblown – only 30 million people affected →

Experts warns of a new extortion campaign based on the Breach Compilation archive →

SubScraper – External Pentest Tool That Performs Subdomain Enumeration Through Various Techniques →