Josh Jacob

CSRF Aid


An easy way to PoC GET request CSRF. Add the URL you would like to perform CSRF on as a URL parameter with the key "url", and the page will send a "mode: no-cors", "credentials: include" fetch and alert you when the request is complete. This will likely not be useful once Chrome same-site business is enforced.

DISCLAIMER: This is meant to be used solely for research purposes. Any malicious use is not allowed.

I'm not a designer so there is no back button.