🔄 06 — Cross-Site Request Forgery
0/3 solved
⏰ Medium — Predictable CSRF Token
The CSRF token is a Unix timestamp (seconds). Predict the token to bypass protection.
Current server token:
1790036366The token is just
int(time.time()). Generate one at the same second as the server (or within 60s) and send it. The PoC can calculate Math.floor(Date.now()/1000) in JS.