Posts

Showing posts with the label CSRF Scanning Suite

Bolt - Csrf Scanning Suite

Image
Bolt is inward beta stage of evolution which way at that spot tin move bugs. Any production role of this tool discouraged. Pull requests as well as issues are welcome. I also propose you lot to pose this repo on sentinel if you lot are interested inward it. Workflow Crawling Bolt crawls the target website to the specified depth as well as stores all the HTML forms constitute inward a database for farther processing. Evaluating In this phase, Bolt finds out the tokens which aren't potent plenty as well as the forms which aren't protected. Comparing This stage focuses on detection on replay assault scenarios as well as thence checks if a token has been issued to a greater extent than than ane time. It also calculates the average levenshtein distance betwixt all the tokens to come across if they are similar. Tokens are also compared against a database of 250+ hash patterns. Observing In this phase, 100 simultaneous requests are made to a unmarr...