While reading my RSS feeds a new article from The H security popped in the list. The title was promising “Detecting CSRF vulnerabilities”. Happy to read something new on that topic I followed the link only to find with a great disappointment that the article author Stefan Schurtz is talking about a 5 years old tool provided by OWASP (Csrftester). “OK, the tool is probably updated” my inner voice said. I’ve opened the CSRFtester google code project page and what a surprise – the last code update was dated 2009.
So … The H Security – you call this news – you got to be kidding me!!!