Acme Bank (CSRF)

web · medium · 250 pts

Acme Bank lets you transfer money. There's no CSRF token. The admin bot visits any URL you submit. Drain the admin's account. --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up csrf-bot ``` Then open `http://localhost:8000` and start solving.