[Mission] Confused Deputy

🎯 Confused Deputy (General · Level 1 · +50 XP)

An account security settings form processes state-changing POST requests without anti-CSRF token verification or SameSite cookie attributes.

Learning & Defense Goals:

🎯 Launch Isolated Sandbox on Cyber Lab →

Community Discussion Rules: Discuss methodologies, discovery tactics, and architectural hardening. Please do not post raw flags directly. Share your production remediation code!