sf

XSRFProbe is an advanced Cross Site Request Forgery (CSRF/XSRF) Audit together with Exploitation Toolkit. Equipped alongside a Powerful Crawling Engine together with Numerous Systematic Checks, it is immediately able to discovery close cases of CSRF vulnerabilities, their related bypasses together with futher generate (maliciously) exploitable proof of concepts alongside each institute vulnerability. For to a greater extent than information on how XSRFProbe works, run across XSRFProbe Internals on wiki . Some Features: Performs several types of checks earlier declaring an endpoint equally vulnerable. Can discovery several types of Anti-CSRF tokens inward POST requests. Features a powerful crawler which features continuous crawling together with scanning. Out of the box back upwards for custom cookie values together with generic headers. Accurate Token-Strength Detection together with Analysis using diverse algorithms. Can generate both normal equally good equally m...

Bolt is inward beta stage of evolution which way at that spot tin move bugs. Any production role of this tool discouraged. Pull requests as well as issues are welcome. I also propose you lot to pose this repo on sentinel if you lot are interested inward it. Workflow Crawling Bolt crawls the target website to the specified depth as well as stores all the HTML forms constitute inward a database for farther processing. Evaluating In this phase, Bolt finds out the tokens which aren't potent plenty as well as the forms which aren't protected. Comparing This stage focuses on detection on replay assault scenarios as well as thence checks if a token has been issued to a greater extent than than ane time. It also calculates the average levenshtein distance betwixt all the tokens to come across if they are similar. Tokens are also compared against a database of 250+ hash patterns. Observing In this phase, 100 simultaneous requests are made to a unmarr...