Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-43617 — This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability | Kitploit
Tools/GitHubGitHub/sybelle03/cve-2021-43617
Vulnerability AnalysisExploitationWeb Application ExploitationPhishingWeb SecurityPenetration Testing
GitHubsybelle03/cve-2021-43617

CVE-2021-43617

This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability

View Repository
11243 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-43617

This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting (XSS) to Cross Site Request Forgery (CSRF) vulnerability

Description

The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let us run arbitary javascript and bypass the csrf token

Steps to reproduce:

  • Creation of a Laravel 8.7.* application displaying an upload image file form
  • Creation of a html file csrfbypass.html which contains the exploit to bypass form csrf token.
  • Use of HxD tool to add FF D8 FF E0 at the very begining of the file (giving the csrfbypass_util.html file)
  • Upload this one on the application and try to display it. The csrf token is displayed in the alert(javascript)
Download Tool