Request Forgery

Definitions

1. An attack in which a victim's browser or trusted context is tricked into sending a request the victim did not intend, often using existing authentication automatically. Request forgery is most commonly associated with cross-site request forgery in web apps, but similar patterns appear in other trust-boundary abuses too.

   In plain English: Tricking a trusted system or browser into sending a request on someone else's behalf.

   Example: "The billing portal lacked anti-CSRF controls, so a hidden form on another site could trigger a request forgery against an authenticated user."

Related Terms

• XSS
• CSRF
• OWASP
• CAPTCHA Solving
• Challenge Token
• Cookie Security
• Crypto Mining Attack
• Dual-Use Tool
• Malvertising
• Reflected Input
• Reverse Proxy Security
• Rogue Employee