Well, that’s all and I hope that this tool will be useful. With this extension you can create your proof of concept without spending time writing. On the left side appears the raw request, on the right side the proof of concept and below are the buttons where you can save as a file or just copy the content. Once you have sent the ítem you can see a new a tab within the “CSRF PoC” section. In the HTTP history you can select the items you want and its create proof of concept. Its use is very easy, just you have to add it to burp extensions and a new item appears in the popup menu on the HTTP HISTORY “s end to CSRF PoC Creator” and a new tab “ CSRF PoC” This extension is written in Java and you can download it at. In the Burp Suite Pro version there is an option to generate a proof of concept but as usual, many people do not have the pro version, so to solve that I decided to write an extension to create proof of concepts of CSRF. Often you find CSRF / XSRF (Cross-site request forgery) flaws and you have to write a proof of concept and it is very tedious, sometimes our proof of concept has several lines of code and what we want is to end soon.

When I look for vulnerabilities in web applications I always use free tools to do some tests. Keep in mind that if you want to use Burp shite, then Java. Hello! I just want to share a burp extensión!! First of all, you have to click above the link given below and you will be redirected to the top of this website from where you have to download Burp suite according to your window.