I have been doing a bit of dvwa(damn vulnerable web application) and I have a question on CSRF.
There is an additional parameter, a csrf token, which is submitted in the get request. All the answers i saw on the web uses xss to trigger the password change.
I thought of a different way and was wondering if my answer was right ?
Basically what i do is create a php script on attacker website which requests the dvwa csrf page, collects the user_token issued to the attacker page then use that token to further submit the password, new_password and the user_token. I tried doing this (request two pages and using the user token of one page on another)