Write-up: CSRF vulnerability with no defenses | 2024

This write-up is my approach to solving the “CSRF vulnerability with no defenses” lab on PortSwigger’s WebSecurity Academy.

Description:

Solution:

Login with default credentials.

Make csrf code.

Go to exploit server. Store and deliver exploit to victim.

Solved.