Web - Client

Thursday 23 January 2020, 22:39  #1
Web - Client - CSRF 0 protection
freezix
  • 1 posts

Hi,

I’m stuck here.
I have a script that send the request I want when I copy it in the console of my browser
I have a way to inject it (checked with request bin)

But when I send the script nothing happens.
I tried to send a request to my request bin at different point in my script to see at which point it would fail.

It seems it fails when I try to append something to my victim’s body.

XMLHttpRequest does not seem to work

Thanks for any help