CSRF Vulnerability Crawler

Overview

This project demonstrates the detection of Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It includes research on CSRF protections, a Python-based crawler for identifying forms that may lack CSRF tokens, and example HTML forms showing vulnerable and protected implementations.

Features

• Crawls web pages
• Detects HTML forms
• Checks for common CSRF token fields
• Reports potentially vulnerable forms
• Includes vulnerable and protected form examples

Project Structure

csrf-vulnerability-crawler
│
├── crawler.py
├── requirements.txt
├── README.md
│
├── research
│   └── csrf_research.md
│
└── demo
    ├── vulnerable_form.html
    └── protected_form.html

Installation

pip install -r requirements.txt

Usage

python crawler.py

Enter the target URL when prompted.

CSRF Protection Techniques

• CSRF Tokens
• SameSite Cookies
• Origin Validation
• Referer Validation
• Custom Request Headers

Educational Purpose

This project is intended for educational purposes and authorized security testing only.

Author

Jesty Jose