Sina Weibo's CSRF point: Weibo via my link (worms)

Sina Weibo's CSRF point: Weibo via my link (worms)

The referrer bypassed the last year.

Happy New Year!

Feature Points: The comments feature on the http://wanwan.sina.com.cn/event/sssanguo_2/sg.php page, although the activity has ended, but the comment interface can still be used. The API verifies the referer, but you can use a URL similar to the following to bypass it.
 

Http://x.com/test.html? Http://wanwan.sina.com.cn/event/sssanguo_2/sg.php test code:

After logging on to Weibo, click this link:
 

Http://a.zhchbin.xyz/index.html ?? Http://wanwan.sina.com.cn/event/sssanguo_2/sg.php/

 

Burp packet capture
 

 

Solution:

Repair verification.