Forum Discussion
Solved
Help with Cross Site Request Forgery (Twooter)
Hi folks, I'm having a hard time getting past the Cross Site Request Forgery lab - specifically I'm not sure what sort of payload I can use to obtain the username of the scraper. I can get their I...
Oh OK. You don't need to try and send anything back to your kali box - just craft a link that when clicked will send a message to the message board.
Don't overthink it.
You'll observe that when a user submits a twoot their username is displayed along with the message.
So, if you can submit a payload that replicates submitting a twoot, the username of anyone who interacts with it should be displayed.
