Exploiting Client-Side Path Traversal - CSRF Is Dead, Long Live CSRF

Exploiting Client-Side Path Traversal - CSRF Is Dead, Long Live CSRF

Explore the evolution of Cross-Site Request Forgery (CSRF) attacks and learn about client-side path traversal vulnerabilities in this 38-minute conference talk presented by Maxence Schmitt at an OWASP Foundation event. Discover how traditional CSRF techniques have evolved and gain insights into new exploitation methods that leverage client-side vulnerabilities. Understand the implications of these emerging threats for web application security and learn strategies to protect against them.