CSRF PoC Generator

Mission: The bank server https://bank.local/transfer has no CSRF protection and accepts POST requests. Write the HTML code you would host on your malicious site to force a transfer sending an name="amount" field.