CSRF PoC Generator

Create a proof-of-concept HTML page for testing CSRF vulnerabilities.

Target URL

HTTP Method

Encoding Type (Auto-converts data)

Custom Headers

Note: Browsers block scripts from setting certain forbidden headers like User-Agent, Origin, etc.

JSON Body

Generated PoC Code

Copied to clipboard!