Home▸Cybersecurity▸CSRF Attack & Defense Simulator

🛡️ CSRF Attack & Defense Simulator

Interactive diagram of a Cross-Site Request Forgery attack: watch evil.com fire a hidden POST at bank.com using the victim's ambient session cookie, then toggle CSRF tokens and SameSite cookies to see the request get blocked.

Cybersecurity2DModerate60 FPS🔥 Fire

Details

CategoryCybersecurity

RenderingCanvas 2D

DifficultyModerate

Target FPS60

ControlsCSRF token toggle switch enables/disables server-side token validation on bank.com; SameSite cookie toggle switch enables/disables cross-site cookie withholding; Simulate attack button fires an animated forged POST request from evil.com to bank.com and evaluates it against the active defenses; Reset button restores balance, counters and defense toggles to their initial state.

CSRFcybersecurityweb securityCSRF tokenSameSite cookieSVG animation

Related simulations

Cloud Detection & Response ConsoleCloud workload nodes stream telemetry into a detection engine — watch alerts fire and…

Container Escape via Shared KernelSix containers share one host's Linux kernel: click a container to compromise it, then…

5G Network Slicing IsolationInteractive 3D 5G network simulator: compare a sliced network — consumer, IoT/factory and… ⊞ All 217 in Cybersecurity →

⚙ Under the hood

Interactive diagram of a Cross-Site Request Forgery attack across three nodes: the victim's browser, a malicious evil.com tab and bank.com. Fire a forged POST from evil.com and watch the browser attach the ambient session cookie automatically; toggle a CSRF token check and a SameSite cookie policy independently to see the request get blocked with a 403 or withheld cookie instead.

CSRFcybersecurityweb securityCSRF tokenSameSite cookieSVG animation

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install