| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-07-12 | 509 Bytes | |
| XSRFProbe v3.0 source code.tar.gz | 2026-07-12 | 79.1 kB | |
| XSRFProbe v3.0 source code.zip | 2026-07-12 | 102.9 kB | |
| Totals: 3 Items | 182.6 kB | 0 | |
XSRFProbe v3 is here! It's basically a from-scratch rebuild of the engine with way fewer false positives.
It comes with a whole new suite of checks (token tampering, method/Content-Type overrides, Origin/Referer bypasses, SameSite cookie analysis), each with a clear ID, severity and exploitability notes. There's headless-browser support for SameSite bypasses, tailored auto-validating PoCs, a bounded smarter crawler, and JSON reports.
The wiki has been completely rewritten to match as well. :)