Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight
Security BSides San Francisco via YouTube
Cybersecurity: Ethical Hacking Fundamentals - Self Paced Online
Google Data Analytics, IBM AI & Meta Marketing — All in One Subscription
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Learn how to discover hidden vulnerabilities in commonly used security libraries through a detailed case study of finding a long-standing CSRF (Cross-Site Request Forgery) bug in the popular gorilla/csrf Go library. Explore the methodology and techniques used to uncover this vulnerability that was hiding in plain sight, and gain insights into performing your own vulnerability research experiments on widely-used development tools. Understand the importance of not blindly trusting security implementations and develop skills to verify the robustness of the libraries and frameworks you rely on in your projects.
Syllabus
BSidesSF 2025 - Don't Trust, Verify! - How I Found a CSRF Bug Hiding... (Patrick O'Doherty)
Taught by
Security BSides San Francisco