Search talks

BSides · 2025bsidessf-2025intermediate

Don't Trust, Verify! - How I Found a CSRF Bug Hiding... (Patrick O'Doherty)

Don't Trust

DRAGONJAR · 2025dragonjar-hacking-y-seguridad-informaticintermediate

CSRF: El "Nuevo" Target - Juan David Castro

DRAGONJAR · 2025dragonjar-hacking-y-seguridad-informaticadvanced

Hackeando Twitter Usando CSRF Movile Devices

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins

NULLCON · 2025nullcon

Goa 2013: CSRF Finder as a Mozilla Addon by Piyush Pattanayak @Warri0R_

OWASP · 2025owasp-foundation

CSRF: not all defenses are created equal

Ari Elias-Bachrach

OWASP · 2025owasp-foundation

Everything You Wanted to Know About Client side CSRF But Were Afraid to Ask

Soheil Khodayari

OWASP · 2025owasp-foundation

Exploiting Client-Side Path Traversal: CSRF Is Dead, Long Live CSRF

Maxence Schmitt

OWASP · 2025owasp-foundation

Federated Login CSRF

OWASP · 2025owasp-foundation

How to detect CSRF vulnerability, reliably?

OWASP · 2025owasp-foundation

Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking

Jim Manico

PROIDEA · 2025proidea-events

CONFidence 2021: Request Forgery on the Web - SSRF, CSRF and Clickjacking

Jim Manico

HITB · 2024hack-in-the-box-security-conference

#HITB2012KUL D2T1 - Shreeraj Shah - XSS & CSRF Strike Back -- Powered by HTML5

Shreeraj Shah

CREST · 2022crest-videosadvanced

Penetration Testing: CSRF is dead, long live CSRF! Daniel Tomescu, Associate Manager, KPMG Romania

Daniel Tomescu · Associate Manager · KPMG Romania

DEF CON · 2022DC30

CSRF Resurrections: Starring the Unholy Trinity

Dongsung Kim

NAHAMSEC · 2022nahamsec

Cross-Site Request Forgery (CSRF) Explained

DEF CON · 2018DCCN-BETA

You Logged into My Account

Daizibukaikou

DEF CON · 2017DC25

Wiping out CSRF

Joe Rozner