Web - Client

Monday 15 June 2020, 11:17  #1
Web - Client - CSRF 0 Prot
cyberchron
  • 5 posts

Just curious if im headed in the right direction here with something like this... not sure if the checkbox value will send in the post havent been able to get anything to work yet

action="challenge?action=profile" using post method.
Input value set to username
input type checkbox value yes ** this is where im unsure does this value get posted as well or am i looking at this wrong? **

Ive tried this with an autosubmit javascript which seems to work but didn’t get the job done

Friday 26 June 2020, 20:26  #2
Web - Client - CSRF 0 Prot
MrAssasin
  • 1 posts

Stuck on this too.

I observed the request format for ?action = profile requests is of this form:


40816729440964451441443819581
Content-Disposition: form-data; name="username"

pr


40816729440964451441443819581
Content-Disposition: form-data; name="status"

on


40816729440964451441443819581—

Do we need to send this exact data through the csrf form?