CSRF Lab Exercise: Exploiting CSRF Vulnerability and Capturing the Flag

In this exercise, your task is to exploit a Cross-Site Request Forgery (CSRF) vulnerability and capture the flag. You will need to create a malicious webpage that makes the victim submit the form below without their knowledge.

Follow these steps to complete the exercise:

1. Inspect the form below and understand the parameters it requires, especially the hidden CSRF token.
2. Create a malicious webpage that automatically submits the form when loaded by the victim. Make sure to include the CSRF token in the form submission.
3. Now, create another malicious webpage that automatically submits the form when loaded by the victim. Make sure to include the CSRF token but change it to a token of the same length in the form submission.
4. Test your exploit. If successful, you should capture the flag.
5. Enter the flag in the input field below to check if you captured the correct flag.

Remember: A successful CSRF attack needs to make the request indistinguishable from a legitimate user request. Good luck!