BSidesSF 2025·29 min
Don't Trust
Security researchers examine technical aspects of Don't Trust, Verify! - How I Found a CSRF Bug Hiding... (Patrick O'Doherty).
csrftrustverify+2
csrf
18 talks tagged with this topic.
Filters+
Loading filters…
1–18 of 18 talks · loading…
DragonJAR - Hacking y Seguridad Informática·53 min
Outlines CSRF: El Nuevo Target - Juan David Castro and evaluates key implications for security practitioners.
csrfnuevotarget+2
DragonJAR - Hacking y Seguridad Informática·5 min
Examines hackeando Twitter Usando CSRF Movile Devices and evaluates key implications for security practitioners.
csrftwitterhackeando+2
Microsoft Security Response Center (MSRC)·30 min
BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins
Security researchers examine technical aspects of BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins.
oauthsocialcsrf
nullcon·31 min
Industry experts analyze emerging threats surrounding Goa 2013: CSRF Finder as a Mozilla Addon by Piyush Pattanayak @Warri0R_.
csrffindermozilla+2
OWASP Foundation·45 min
Ari Elias-Bachrach
Ari Elias-Bachrach analyzes CSRF: not all defenses are created equal.
csrfcreatedequal+1
OWASP Foundation·54 min
Soheil Khodayari
Soheil Khodayari analyzes Everything You Wanted to Know About Client side CSRF But Were Afraid to Ask.
csrfeverythingclient+1
OWASP Foundation·38 min
Maxence Schmitt
Maxence Schmitt investigates Exploiting Client-Side Path Traversal: CSRF Is Dead, Long Live CSRF.
csrfexploitingclient-side+3
OWASP Foundation·30 min
AppSecUSA 2017 analyzes Federated Login CSRF.
csrffederatedlogin
OWASP Foundation·42 min
AppSecUSA 2017 explores How to detect CSRF vulnerability, reliably?.
csrfdetectvulnerability+1
OWASP Foundation·47 min
Jim Manico
Jim Manico examines Request Forgery on the Web - SSRF, CSRF and Clickjacking.
webssrfcsrf
PROIDEA Events·25 min
Jim Manico
Jim Manico explores CONFidence 2021: Request Forgery on the Web - SSRF, CSRF and Clickjacking.
webssrfcsrf
Hack In The Box Security Conference·52 min
Shreeraj Shah
Engineers explore architecture and security mechanisms for #HITB2012KUL D2T1 - Shreeraj Shah - XSS & CSRF Strike Back -- Powered by HTML5.
xsscsrfhitb2012kul+3
CREST Videos·44 min
Daniel Tomescu · Associate Manager · KPMG Romania
Penetration Testing: CSRF is dead, long live CSRF! Daniel Tomescu, Associate Manager, KPMG Romania.
penetration-testingcsrfpenetration+1
Main Stage·40 min
Dongsung Kim
Dongsung Kim demonstrates how modern browser features and emerging Web APIs can be chained to resurrect Cross-Site Request Forgery (CSRF) despite SameSite cookies.
csrfsamesitebrowser-security+2
NahamSec·12 min
Cross-Site Request Forgery (CSRF) Explained.
csrfcross-siterequest+2
Main Stage·45 min
Daizibukaikou
Daizibukaikou details login cross-site request forgery and account-takeover vectors where attackers induce victims to authenticate into malicious sessions.
authenticationoauthsso+2
Main Track 1·43 min
Joe Rozner
Building practical CSRF protection solutions that work with legacy code and modern web applications.
csrfweb-securitysame-site-cookies+2