Intel
Payloads
Test payloads from PayloadsAllTheThings, by the weakness class they exercise: each topic's titled passages with their code blocks, linked to the source.
For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.
From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky. The repository.
WeaknessCross-Site Request Forgery
- Every class
- Cross-site Scripting5
- Cross-Site Request Forgery1
- Open Redirect1
- Server-Side Request Forgery1
- SQL Injection4
- Command and Code Injection7
- Injection and Smuggling10
- Deserialization and Object Injection5
- File and Path Handling5
- Race Conditions1
- Denial of Service1
- Input Validation and Logic1
- Misconfiguration and Insecure Design10
- Cryptography1
- Information Disclosure4
- Authentication4
- Insecure Direct Object Reference1
- Other weaknesses2
1 of 64 topics · 1,085 passages in all
Cross-Site Request Forgery
- Cross-Site Request Forgery10 passages · 9 code blocks
Cross-Site Request Forgery (CSRF/XSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated. CSRF attacks specifically target state-changing requests, not theft of data, since the attacker has no way to see the response to th…
Data as of 2026-11-14.