How to test CSRF Attack in Asp.Net Web Application?

Question

Hi I'm new to Security of Web Applications.

I want to test my application for the same purpose.

I have a form, which has some fields and a submit button.

So User X is logged in and he submits the form and now I want to know how hackers can attack on my Application.

I have read I need to post the html code of my aspx page. But I dont know how can I post the form with incorrect data filled in form with html. So is there any tool to test this ? or If with html of my page how can I test it?

Answer 1

The best tool i have found is this: https://portswigger.net/burp/

It has a feature where you can intercept the request and generate a CSRF. The details on this feature can be found here: https://support.portswigger.net/customer/portal/articles/1965674-using-burp-to-test-for-cross-site-request-forgery-csrf-