Video: Bypassing phpNuke 8.x Referer Check Anti-CSRF Defense

Posted by YGN Ethical Hacker Group March 23, 2011

Description: This demo proves that simply validating hostname in HTTP Referer, a widely deployed quick anti-csrf defense, can easily be bypassed.

YGN Ethical Hacker Group Blog