Anti-CSRF token from referer is a Burp Suite extension to automatically take care of anti-CSRF tokens by fetching them from the referer and replacing them in requests.
The main features of compasssecurity/anti-csrf-token-from-referer are: Cross Site Request Forgery.
Open-source alternatives to compasssecurity/anti-csrf-token-from-referer include: daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… ah8r/csrf — CSRF Scanner Extension for Burp Suite Pro. asaafan/csurfer — A CSRF guard hiding extension that keeps track of the latest guard value per session and update new requests accordingly. 0ang3el/easycsrf — EasyCSRF helps to find weak CSRF-protection in WebApp which can be easily bypassed. For example, content type based… hvqzao/burp-token-rewrite — Burp extension for automated handling of CSRF tokens. ldionmarcil/burp-samesite-reporter — Burp extension that passively reports various SameSite flags.
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
A CSRF guard hiding extension that keeps track of the latest guard value per session and update new requests accordingly
EasyCSRF helps to find weak CSRF-protection in WebApp which can be easily bypassed. For example, content type based protection for API (Rest API, GraphQL API, etc) or CSRF-protection based on obscure data format (binary format, etc) are known to be weak. I presented some tricks to bypass…
