1

I want to perform rest testing, like strong text rest client but issue here is website which I am performing testing sets CSRF token in browser in such situation rest client gives 403 error, is there any alternative way to perform these test(s).

  • Are you doing Security testing of this REST service? As you have mentioned the tag 'security-testing', if yes which tool you are using for security testing? – Dhiman Oct 29 '15 at 13:51
  • Your issue of CSRF token will get resolved with the answer mentioned in this question, after that you can proceed with the testing of your REST service. sqa.stackexchange.com/questions/15388/… – Dhiman Oct 29 '15 at 13:52
1

You can do it with burp :

Just make sure that you check Rest style url parameters

enter image description here

Steps you can do were :

1)intercept the request with proxy of burp

2)Right click navigate to engagement tools -->CSRF poc

3)generate a csrf token with invalid/vulnerable parameters

4)check with browser to get the request

Detailed part can be found here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.