auth_csrf_extract
Extract CSRF tokens from HTML forms by searching hidden inputs, meta tags, and script blocks to identify security tokens for web application testing.
Instructions
Extract CSRF tokens from HTML forms.
Searches for the token in hidden input fields, meta tags, and script blocks.
Returns: {"tokens_found": [{"source": str, "value": str}], "cookies": [str]}.
Side effects: Single GET request.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"url": "<url>"
},
"name": "auth_csrf_extract"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL of the form page containing CSRF token | |
| token_name | No | CSRF token field name to search for |