Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added CSRF module #319

Closed
wants to merge 6 commits into from
Closed

Added CSRF module #319

wants to merge 6 commits into from

Conversation

aman566
Copy link
Collaborator

@aman566 aman566 commented Jul 12, 2020

This is CSRF vulnerability module. Currently the module checks for:

  1. SameSite=Strict | Lax Set-cookie attributes.
  2. Checks for referer headers dependence on CSRF.
  3. Manipulating the CSRF token if present. Currently it searches for the following keywords: csrf_token, CSRFName, CSRFToken, anticsrf, __RequestVerficationToken, token, csrf, _csrf_token, csrfmiddlewaretoken, yii_anticsrf.
  4. If not type="hidden" in the response text is present checks.

It needs more improvement. Suggestion are most welcome!!!

Checklist

  • I have followed the Contributor Guidelines.
  • The code has been thoroughly tested in my local development environment with flake8 and pylint.
  • The code is both Python 2 and Python 3 compatible.
  • The code follows the PEP8 styling guidelines with 4 spaces indentation.
  • This Pull Request relates to only one issue or only one feature
  • I have referenced the coresspoinding issue number in my commit message
  • I have added the relevant documentation.
  • My branch is up-to-date with the Upstream master branch.

Your development environment

  • OS: Linux
  • OS Version: Ubuntu 18.04
  • Python Version: 3.6.9

@aman566 aman566 added the new module pull request with new module(s) label Jul 14, 2020
@Ali-Razmjoo
Copy link
Collaborator

this can't be supported anymore. modules are yaml #440

@Ali-Razmjoo Ali-Razmjoo closed this Sep 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
new module pull request with new module(s)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants