CSRF Online — PoC Builder by 0xfndlabs

Endpoint

URL Target

Method

POST GET PUT PATCH DELETE

Content Type

Multipart URL-Encoded JSON

Use Multipart for file upload. GET / JSON / custom headers / PUT/PATCH/DELETE automatically use fetch mode (JS).

Body / query parameters (name & value)

File field name matching the target

Auto-submit on load

PoC runs automatically without any click — only when no file is involved.

Auto-submit when file is selected

Request fires as soon as the file is picked (onchange).

Open in

New tab or same tab for the classic form.

New tab Same tab