[Merkuri]

Hello today I will write about CSRF. It's very easy to exploit.

Code:

Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf[1]) or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts.[2] Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser.

-Wikipedia.
It works by forcing the slaves browser to run HTTP requests in order to implement a range of actions, for example :
Permission faking\stealing.
Disruption of the normal sequence of the site.
Transfer of funds from the Bank.

The slaves should SESSION/COOKIE on the target site, and must be identified by the network protocol verification [HTTP Authentication].

CSRF is using img tag[SRC] insert malicious link should send HTTP requests to the target, such as a GET.
Image tag does not require clicking the link compared.
Nature of browsers is to send HTTP requests to visual objects such as picture or remote files [CSS, JS, etc...] even while loading the page without the user's permissions this means the user does not need to perform any action in order to see the image on the page all he has to do is go to a certain site specific browser sends HTTP requests have to load the image.

I have try to write how to exploit but its very hard understable so here is video :
http://infinityexists.com/videos/underground19/
You can ask me any questions in the comment. Credits for the video goes to Crash Overron hope you like it