Cross-Site Request Forgery (CSRF) Explained And Demonstrated By A Pro Hacker!

// Membership //

// Courses //

// Books //

// Social Links //

// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against the real hackers.

[LoiLiangYang]

Did you watch till the end for the next level demonstration? ;)

[kasuntharinda]

You can enhance your videos by demonstrating how to prevent each attack. This is nice stuff.

[donnypodcast]

Awesome demonstration. I love the expression "That's it! Game over!" I'm currently studying for my Security+ and when I run into practice test questions of which I want a stronger grasp, I often run into your videos that explain these things very well. Thanks for your content.

[dragonore]

It's not hard of course to defend against this attack. Cryptographically sign a csrf token and problem solved. Attacker wants to generate there own csrf token and send it to the server, it will get rejected because the hash won't match because of the secret key that I salt the token with.

[edsonmubezi]

Sorry but how does the hacker get an access to web server according to the instructions you have given above

[hareshjadhav]

I was just watching your another video!

[scarytruths]

Currently, I'm working on a bounty program. Your videos have been very helpful...

[michaelbryant]

I’m only studying for S+ but I still enjoy your videos even tho I barely understand lol

[moinshaikh]

Duck duck go are better than Google???? For safety search which is best ??

[iot_galaxy]

I thought you were @networkchuck for a minute, in the mask😂

[gaganbansal]

I was with you till 4:20 on the timeline but lost it from there till 4:47. Not sure what happened there precisely.

[thereviewshowbyviraj]

I have wathc your all the videos, except members only videos, how do i become a member

[kaanvardar]

you are the best keep doing what you are doing

[oentrepreneur]

Something about the "view my pictures" that he said cracks me up, lol. It's like the hacker pretends to be a webcam girl and sends the link to the victim(who's a horn ball) to get him to click it.

[דניאלבראילובסקי]

So for example if you want this to work you need to have his banking site session or the browser that has his session id, am I right?

[bryanleong]

Thanks a lot, this video really explain well about the CSRF & it helps me understand it well too.

[boogiman]

almost fell of my chair when i saw his Kali desktop .. lol

[Jel.Awesh.M]

What about CORS? Is it disabled for this demonstration?

[thatsJD]

Its really good but you talk too fast.

[sreeharikv]

Sir, you videos are good, really useful