Proofs of Concept

Sanitized notes from security testing and lab work. Examples are intentionally kept non-deployable and focused on the underlying issue.

CSRF: missing request integrity controls

A short write-up on identifying and mitigating cross-site request forgery.