Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-45857-Demo — Interactive demo for CVE-2023-45857 (axios XSRF token bypass). Step-by-step guide to reproduce the vulnerability in a controlled dev container environment. | Kitploit
Tools/GitHubGitHub/fuyuooumi1027/cve-2023-45857-demo
Vulnerability AnalysisExploitationWeb Application ExploitationAPI Security TestingCTFLearning & Education
GitHubfuyuooumi1027/cve-2023-45857-demo

CVE-2023-45857-Demo

Interactive demo for CVE-2023-45857 (axios XSRF token bypass). Step-by-step guide to reproduce the vulnerability in a controlled dev container environment.

View Repository
122 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Demo to verify the behavior of axios vulnerability CVE-2023-45857

  1. Start with dev container
  2. Run npm run dev on the app container
  3. Access http://app.localhost
  4. Verify that XSRF-TOKEN is set in the Cookie using the browser's developer tools
    • The value is CREDENTIAL_TOKEN
    • HttpOnly is false
    • SameSite is Strict
  5. Press the button
  6. In the developer tools, verify that the request to whoami.localhost/api has the header x-xsrf-token with the value CREDENTIAL_TOKEN
    • Since whoami returns the request as-is, this can also be confirmed on the browser
Download Tool