{"guid":"import-823765436f0318a89b","title":"CSRF, the Intranet and You","subtitle":"Causes, Attacks and Countermeasures","slug":"23C3-1560-en-csrf","link":"http://events.ccc.de/congress/2006/Fahrplan/events/1560.en.html","description":"A detailed introduction to Cross Site Request Forgery. This talk presents the fundamental cause of this vulnerability class and examples of potential attack consequences. The second half of the talk is devoted to avoiding and countering CSRF: Implementing CSRF proof session handling, transparent retrofitting of legacy applications and methods for client side protection.\n","original_language":"eng","persons":["Justus Winter","Martin Johns"],"view_count":58,"promoted":false,"date":"2006-12-30T01:00:00.000+01:00","release_date":"2008-01-01T01:00:00.000+01:00","updated_at":"2025-08-12T04:45:02.532+02:00","tags":["23c3"," Hacking"],"length":3682,"duration":3682,"thumb_url":"https://static.media.ccc.de/media/congress/2006/23C3-1560-en-csrf.jpg","poster_url":"https://static.media.ccc.de/media/congress/2006/23C3-1560-en-csrf_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2006/import-823765436f0318a89b-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2006/import-823765436f0318a89b-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/23C3-1560-en-csrf","url":"https://api.media.ccc.de/public/events/import-823765436f0318a89b","conference_title":"23C3: Who can you trust?","conference_url":"https://api.media.ccc.de/public/conferences/23c3","related":[{"event_id":990,"event_guid":"import-7317225cacc9eb4d71","weight":2},{"event_id":1057,"event_guid":"import-d93f6f776ff5e0bf3d","weight":1},{"event_id":1064,"event_guid":"import-95d8bc2858a58621e6","weight":1},{"event_id":1065,"event_guid":"import-c872b9c2f9c5b49694","weight":1},{"event_id":1075,"event_guid":"import-278b33c334c7d98406","weight":1},{"event_id":1096,"event_guid":"import-951bd3b975cd6a7f7e","weight":1},{"event_id":1115,"event_guid":"import-1a4080ee807514e9de","weight":1},{"event_id":1133,"event_guid":"import-63fd9556269ebc5a94","weight":1},{"event_id":1142,"event_guid":"import-811a4a998765dd6d06","weight":1},{"event_id":1149,"event_guid":"import-54ac75812fba306f63","weight":1},{"event_id":1162,"event_guid":"import-d8ab7a89bd5682b6d7","weight":1},{"event_id":1166,"event_guid":"import-106c6a69092efb9c66","weight":1},{"event_id":1199,"event_guid":"import-33d008be85a0548e56","weight":1},{"event_id":1200,"event_guid":"import-fa002ccb6787ebc14f","weight":1},{"event_id":1202,"event_guid":"import-1d64518c2e5554b342","weight":1},{"event_id":1203,"event_guid":"import-fc58b881c2cf74003e","weight":1},{"event_id":1218,"event_guid":"import-16fe6a6e95d7c4f819","weight":1},{"event_id":1239,"event_guid":"import-27fa6e2b6bb6fbc64d","weight":1},{"event_id":1242,"event_guid":"import-d175259861c6ba7d80","weight":1},{"event_id":1243,"event_guid":"import-14815d5b90a0058d10","weight":1},{"event_id":1530,"event_guid":"import-6fdeaba494d8699165","weight":1},{"event_id":1780,"event_guid":"hWph2wdjII5XK6nCL_1kWA","weight":1},{"event_id":1788,"event_guid":"-isG7Swsi8DaA62qztr0Kw","weight":1},{"event_id":1805,"event_guid":"z2_SbAXdwSQnezj6oPTuIg","weight":1},{"event_id":1833,"event_guid":"bJDjDUHLd0Y6wLncMd5Unw","weight":1},{"event_id":2240,"event_guid":"iWU6RrYVPk7Q-fLuBE-LoQ","weight":1},{"event_id":2515,"event_guid":"b8a7511e-143d-45c5-b974-2e91dab18814","weight":1},{"event_id":2533,"event_guid":"c1f34fda-54f2-407c-b68c-44dafc820282","weight":1},{"event_id":2875,"event_guid":"0bdbef2d-1594-4582-b315-7ee5da5505bf","weight":1},{"event_id":3733,"event_guid":"855ab830-c6c0-4be7-b84c-31ba78e90e3c","weight":1},{"event_id":4323,"event_guid":"df804417-58b7-42fa-a626-83ed1663677f","weight":1},{"event_id":4851,"event_guid":"f5245c8c-5020-4bfc-914b-b0c161ff794b","weight":1},{"event_id":4885,"event_guid":"956cf3ed-c342-4c1d-b636-29ec3d4578d2","weight":1},{"event_id":4943,"event_guid":"0101e48d-bf0e-43f2-a690-a1d114088f7f","weight":2},{"event_id":5332,"event_guid":"ea7536ab-518e-5ec3-a897-7de5b1cc90cf","weight":1},{"event_id":5380,"event_guid":"acc35999-4707-5ef9-a8af-f3b197f09704","weight":1},{"event_id":5521,"event_guid":"c3dbbb23-45de-421a-89bf-74ba5f0607e8","weight":1},{"event_id":5636,"event_guid":"ba118e5f-1c35-585c-91f6-9477b0c64897","weight":1},{"event_id":5707,"event_guid":"37a90809-5147-5662-bbce-c669c810fec9","weight":1},{"event_id":5708,"event_guid":"138ff0ac-a12c-5211-aeaf-722cc072ea07","weight":1},{"event_id":5709,"event_guid":"cbe1f8bd-13bb-5ff3-965f-c1e5e2c2abd8","weight":1}],"recordings":[{"size":170,"length":3682,"mime_type":"audio/mpeg","language":"eng","filename":"23C3-1560-en-csrf.mp3","state":"downloaded","folder":"audio","high_quality":true,"width":640,"height":480,"updated_at":"2014-05-10T15:26:40.405+02:00","recording_url":"https://cdn.media.ccc.de/congress/2006/audio/23C3-1560-en-csrf.mp3","url":"https://api.media.ccc.de/public/recordings/1921","event_url":"https://api.media.ccc.de/public/events/import-823765436f0318a89b","conference_url":"https://api.media.ccc.de/public/conferences/23c3"},{"size":170,"length":3682,"mime_type":"video/mp4","language":"eng","filename":"23C3-1560-en-csrf.m4v","state":"downloaded","folder":"video","high_quality":true,"width":640,"height":480,"updated_at":"2016-01-27T11:03:22.546+01:00","recording_url":"https://cdn.media.ccc.de/congress/2006/video/23C3-1560-en-csrf.m4v","url":"https://api.media.ccc.de/public/recordings/1920","event_url":"https://api.media.ccc.de/public/events/import-823765436f0318a89b","conference_url":"https://api.media.ccc.de/public/conferences/23c3"}]}