Resources
People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!
- Typically, CSRF testing is just edit the token, remove the token... and so on. But, this article explains another way to bypass CSRF protections in some applications.
- How? Sometimes, applications have redirects to different types of redirect. The author refers to this as method override. This method override can change the way a request is sent (change a GET to a PUT, for instance).
