#CSRF

2 posts

BugForge - Weekly - Fur Hire (Mar 14, 2026)

This walkthrough demonstrates a chained attack against a job recruitment application protected by a WAF. The application reflects unsanitised input in the…

XSS WAF Bypass CSRF

Posted on 2026-03-14 09:00 7 min read

BugForge - Weekly - FurHire (Dec 29, 2025)

After creating recruiter and job seeker accounts, a normal job application flow was completed to identify where application status updates are handled. An…

WAF By Pass XSS CSRF

Posted on 2025-12-29 10:15 5 min read