Academy
Apprentice track

Cross-Site Request Forgery

Ride the victim's session: why ambient authority needs tokens.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How CSRF worksThe browser sends your cookies everywhere. That is the vulnerability.
  2. 02Lab: the missing tokenA transfer form with no token. Fire it from the attacker's seat.
  3. 03CSRF quizThree questions on the mechanism and its defenses.