Simulación del ataque CSRF por medio de una aplicación web con enfoque explicativo

Abstract

This document presents the development of a simulation that helps understand what happens at the network and protocol level when a CSRF attack is executed. Using technologies such as Java, JavaScript, HTML, Angular, Spring Boot, and GitHub, a web page with functionalities similar to a banking portal was built, allowing different levels of security to be configured. Additionally, a vanilla JavaScript application was programmed to explain step-by-step how to carry out the attack, enabling users to understand the potential impacts and how to prevent them. This project successfully explains in a simple manner the impact that the CSRF vulnerability can have, helps raise awareness when browsing the internet, and reduces the likelihood of falling victim to this type of attack by educating users on the necessary protective measures and best practices.