CSRF - Lab #8 CSRF with broken Referer validation | Long Version

In this video, we cover Lab #8 in the CSRF module of the Web Security Academy. This lab's email change functionality is vulnerable to CSRF. It attempts to detect and block cross domain requests, but the detection mechanism can be bypassed. To solve the lab, we use the exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address.

▬ 🌟 Video Sponsor 🌟 ▬▬▬▬▬▬▬▬▬▬

Sign up to Intigriti: https://go.intigriti.com/ranakhalil (affiliate link)

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬

Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series

▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬

00:00 - Introduction

00:14 - Intigriti sponsorship (https://go.intigriti.com/ranakhalil)

01:09 - Navigation to the exercise

01:44 - Understand the exercise and make notes about what is required to solve it

02:43 - Exploit the lab using Burp Suite Pro

13:17 - Script the exploit (without Burp Suite Pro)

18:40 - Summary

18:53 - Thank You

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬

HTML script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/csrf/lab-08/csrf-lab-08.html

Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/csrf/lab-08/notes.txt

CSRF theory video: https://www.youtube.com/watch?v=7bTNMSqCMI0&ab_channel=RanaKhalil

Web Security Academy Youtube Video Series Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/edit#gid=0

Web Security Academy: https://portswigger.net/web-security/csrf/lab-referer-validation-broken

Rana's Twitter account: https://twitter.com/rana__khalil