Questions

1. What is CSRF?
2. What's one possible attack scenario for a malicious actor who discovers a CSRF vulnerability?
3. What's the typical structure of a CSRF PoC?
4. How do you use a CSRF PoC to validate a vulnerability?
5. What's the advantage of using BeautifulSoup to generate HTML, as opposed to raw string manipulation?
6. What type of CSRF attack did we engage in for our end-to-end example?
7. What kind of CSRF markup would a malicious actor use? How would it differ from our PoCs? How would it be similar?