pikachu靶场：CSRF跨站请求伪造

pikachu靶场 ：三、CSRF 跨站请求伪造

• CSRF 概述
• CSRF（get）
• CSRF（post）
• CSRF Token

CSRF 概述

Cross-site request forgery（CSRF）简称为"CSRF"技术，在其 typical attack scenario 中, attacker generates a request (usually a hyperlink), which is used to trick the victim into clicking on it. Once the victim clicks on this request, the attack is effectively completed.
Additionally, CSRF attacks are also referred to as "one-click" attacks.
It is not uncommon for many people to fail to properly understand CSRF concepts, leading them to mistakenly associate it with Cross-Site Scripting (XSS) or mistak