A Form-Based PoC for Posting JSON Data in a CSRF Attack
0x01 Preface. I encountered this today and found almost no examples in this form despite extensive searching. A fellow researcher shared an overseas article, and with that reference I finally built a working PoC. 0x02 PoC. Submitting POST data with a form is simple, as shown below. This is a CSRF test! But this form leaves an unwanted equals sign. The following approach removes it…