LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite.
Motivation
Burp Suite is an intercepting HTTP Proxy, and it is the defacto tool for performing web application security testing. The feature of Burp Suite that I like the most is Generate CSRF PoC
. However, this does not support JSON parameters. It also uses the <form>
, so it cannot send PUT/DELETE requests. In addition, multibyte characters that can be displayed in the burp itself are often garbled in the generated CSRF PoC. Those were the motivations for creating this extension.
Features
Difference in display of multibyte characters
The following image shows the difference in the display of multibyte characters between Burp’s CSRF PoC generator and LazyCSRF. LazyCSRF can generate CSRF PoC without garbling multibyte characters that are not garbled on Burp.
Installation
Download the jar from GitHub Releases. In Burp Suite, go to the Extensions tab in the Extender tab, and add a new extension. Select the extension type Java
, and specify the location of the jar.
How to Build
intellij
If you use IntelliJ IDEA, you can build it by following Build
-> Build Artifacts
-> LazyCSRF:jar
-> Build
.
Command line
You can build it with maven.
$ mvn install
Usage
You can generate a CSRF PoC by selecting Extensions
->Generate JSON CSRF PoC with Ajax
or Generate POST PoC with Form
from the menu that opens by right-clicking on Burp Suite.
LICENSE
MIT License
Copyright (C) 2021 tkmru
Write a AI detection pass, persuasive, cickable, catchy, well structured and seo optimized article with… Read More
AI Will Make Human Art More Valuable AI models are increasing in popularity and value… Read More
UK Set to Announce Ban on TikTok on Government Smartphones: Report Following in the footsteps… Read More
How ChatGPT and Generative AI Could Change the Way We Travel The travel industry is… Read More
The curious case of Pluto! Is it a dwarf planet, comet or an asteroid? This… Read More
A Spy Wants to Connect with You on LinkedIn: How to Spot and Avoid Fake… Read More
Leave a Comment