<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clip

Limitation - Assumes the site being tested is over SSL. about pinata-csrf-tool HOT 3 OPEN

GoogleCodeExporter commented on June 17, 2024

Limitation - Assumes the site being tested is over SSL.

from pinata-csrf-tool.

Comments (3)

GoogleCodeExporter commented on June 17, 2024

Support for WebScarab and Paros HTTP Raw Format resolves this issues for HTTP 
request taken from these proxies. Burp HTTP Raw Format still assumes that you 
are over SSL. Edit HTML generated to change HTTPS to HTTP if required.

Original comment by [email protected] on 3 Aug 2010 at 11:44

from pinata-csrf-tool.

GoogleCodeExporter commented on June 17, 2024

This should easily be solved by giving users an option to specify. 
Of course, default can be SSL as you assume.

Original comment by yehg.net on 1 Jan 2011 at 8:09

from pinata-csrf-tool.

GoogleCodeExporter commented on June 17, 2024

I have thought about it but decided against asking for any user input during 
the execution of the script. The user will have to edit the html code anyways 
to customize the attack and this can be easily edited at that time. However if 
there is a strong demand I will include that in the next release.

Original comment by [email protected] on 1 Jan 2011 at 9:21

from pinata-csrf-tool.

Recommend Projects