DIAMOND Global Variables: Handling CSRF Tokens

[TheMekanic]

[ Hidden Content! ]

The Goal: Handling the hidden security tokens that cause "Invalid Request" errors.
Steps:

1. The Initial GET: Always start your config with a
   GET
   request to the Login Page.
   
2. Token Extraction: Look for a hidden input field in the HTML (usually named
   csrf_token
   or
   nonce
   ).
   
3. Dynamic Parsing:
   • Left String: name="csrf_token" value="
     
   • Right String: "
     
4. The POST: In your login request, add the token to the body:
   email=<user>&pass=<pass>&csrf_token=<token_variable>