I have been doing a bit of dvwa (damn vulnerable web application) and I have a question on CSRF.
There is an additional parameter, a csrf token, which is submitted in the get request. All the answers I saw on the web uses xss to trigger the password change.
I thought of a different way and was wondering if my answer was right?
Basically what I do is create a php script on attacker website which requests the dvwa csrf page, collects the user_token issued to the attacker page then use that token to further submit the password, new_password and the user_token.
I tried doing this (request two pages and using the user token of one page on another)