Cross Site Request Forgery Attacks

Under Contruction

Enjoy a recursive tree blowing in the wind while you wait.
Sorry your browser doesn't support HTML5's <canvas> tag. Please view this page using a modern browser such as Google Chrome.

Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser.

wikipedia