session

Web Exploitation

CSRF Attacks and Defenses: Forging State-Changing Requests

How Cross-Site Request Forgery hijacks authenticated sessions, with a hands-on PoC and modern token/SameSite defenses.