In this video, we cover Lab #4 in the CSRF module of the Web Security Academy. This lab's email change functionality is vulnerable to CSRF. It uses tokens to try to prevent CSRF attacks, but they aren't integrated into the site's session handling system. To solve the lab, use your exploit server to host an HTML page that uses a CSRF attack to change the viewer's email address. ▬ 🌟 Video Sponsor 🌟 ▬▬▬▬▬▬▬▬▬▬ Sign up to Intigriti: https://go.intigriti.com/ranakhalil (affiliate link) ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series ▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬ 00:00 - Introduction 00:14 - Intigriti sponsorship (https://go.intigriti.com/ranakhalil) 01:08 - Navigation to the exercise 01:47 - Understand the exercise and make notes about what is required to solve it 02:56 - Exploit the lab using Burp Suite Pro 13:23 - Script the exploit (without Burp Suite Pro) 18:45 - Summary 18:55 - Thank You ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ HTML script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/csrf/lab-04/csrf-lab-04.html Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/csrf/lab-04/notes.txt CSRF theory video: https://www.youtube.com/watch?v=7bTNMSqCMI0 Web Security Academy Youtube Video Series Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/edit#gid=0 Web Security Academy: https://portswigger.net/web-security/csrf/lab-token-not-tied-to-user-session Rana's Twitter account: https://twitter.com/rana__khalil