CSRF Vulnerability with no defense
Hint: Hint: None. Point of the lab is to construct a web page that will launch a CSRF attack and change the users email address.
The credentials are: carlos / montoya.
Its a POST method and there is a cookie in the request header.
Now we go to the exploit server and craft our response
and voila
