Skip to content

Instantly share code, notes, and snippets.

@securitytube
securitytube / api.py
Created January 21, 2015 18:36
API Documentation
"""
Our embedded widgets are allowed to call our APIs from 3rd Party Websites.
Here is an example API:
API Name: Challenge Verification API
API Endpoint: /lab/webapp/csrf/12
METHOD: PUT
@securitytube
securitytube / csrf.py
Last active April 3, 2019 21:18
CSRF Attacks
"""
This Challenge requires a 2 Step process:
1. Fetch the CSRF token from the JSON API defined below:
URL: /lab/webapp/csrf/13
Method: POST
Parameters: gettoken=true
Cookie: Required