How this template works
APIs Selection
The template uses API selection filters to specify the criteria for selecting requests to be executed. It filters requests based on the response code being between 200 and 300, or if the request headers, payload, or query parameters contain the keyword "csrf". It also extracts the value of the "csrf" key if found.
Execute request
The template executes a single request by modifying the header, query parameter, and body parameter with a specific value for the "csrf_key". This is done to intentionally replace the CSRF token and assess the effectiveness of the web application's CSRF protection mechanism.
Validation
The template validates the response received from the executed request. It checks if the response code is between 200 and 300, and if the response payload matches at least 80% of the expected payload. Additionally, it checks if the response payload has a length greater than 0. These validation criteria ensure that the unauthorized actions executed due to the absence of a valid CSRF token are successfully detected.
Frequently asked questions
"The text editor in Akto is absolutely remarkable. Its user-friendly YAML format strikes the perfect balance between simplicity and power. With intuitive features like 'API selection filter', 'Execute', Validate' creating test rules becomes incredibly easy. Akto's test editor is a game-changer, enabling seamless creation of highly personalized and effective tests that could meet the needs of any modern day organization. "
Security team,
Rippling
