Beginner
Cybersecurity & Cryptography
Q38 / 100
What is a CSRF (Cross-Site Request Forgery) attack?
Correct! Well done.
Incorrect.
The correct answer is B) An attack tricking authenticated users into unknowingly sending malicious requests to a site where they are logged in
B
Correct Answer
An attack tricking authenticated users into unknowingly sending malicious requests to a site where they are logged in
Explanation
CSRF: victim's browser sends a forged request using their session cookies. Example: a hidden form on evil.com submits a bank transfer to bank.com using victim's session. CSRF tokens prevent this.
Progress
38/100