Cross-site Request Forgery (CSRF) is a common attack against web applications. In this course, Specialized Testing: CSRF, you’ll learn to audit an application for CSRF. First, you’ll explore the mechanics of CSRF. Next, you’ll discover different ways to find and exploit CSRF. Finally, you’ll learn how to detect and potentially circumvent CSRF countermeasures. When you’re finished with this course, you’ll have the skills and knowledge of testing for CSRF needed to audit an application for this kind of vulnerability..
Author Name: Christian Wenz
Author Description:
Christian Wenz is an architect, consultant and author focusing on web technologies. He wrote or co-wrote over 100 books, is a fixture at international developer conferences since 2001, is a Microsoft Most Valuable Professional (MVP) for Developer Technologies since 2004, and the main author of the official Zend PHP certification. His day job includes conducting security audits, migrating old code bases, implementing complex web applications and helping companies choose the right web strategy an… more

Table of Contents

• Course Overview
  1min
• CSRF Fundamentals
  15mins
• Testing for CSRF
  31mins