0xInfection/XSRFProbe

Health v2 · maintenance only

Adoption not part of the score

1306 stars · 220 forks observed · 2026-10-06

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

XSRFProbe is a Python-based Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit. It crawls web applications, runs systematic checks including anti-CSRF token tampering and Referer/Origin/SameSite bypass tests, and generates proof-of-concept exploits for discovered vulnerabilities.

Use cases

• scan a web app for csrf vulnerabilities
• test whether anti-csrf tokens are properly validated
• generate csrf proof-of-concept exploits
• check referer and origin header validation bypasses
• audit samesite cookie protections
• crawl endpoints and detect csrf weaknesses
• test double-submit cookie implementations

When to choose

• you need automated CSRF detection with proof-of-concept generation
• you are doing a security audit or pentest of a web application
• you want to test anti-CSRF token implementations and bypasses
• you need a dedicated CLI scanner rather than a general-purpose scanner

When to avoid

• you need a general-purpose web vulnerability scanner covering XSS, SQLi, etc.
• you want passive-only scanning without active tampering of requests
• you cannot run active attack simulations against the target (e.g., production without authorization)
• you need a GUI-based security tool

Facets

cli-tool · maturity stable

security penetration-testing vulnerability-scanning web-scraping cli security penetration-testing web-development developer-tools python cli windows cross-platform csrf xsrf csrf-scanner csrf-poc appsec web-security-audit anti-csrf-token-tampering samesite-cookie-analysis referer-origin-bypass crawler linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0xInfection/XSRFProbe")