Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-busl-02
Test Ability to Forge Requests
Passed 15 of 22 test cases with the skill, and 12 of 22 without it.
and 4 more in the full report
4 fixed11 passed either way6 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
Under OWASP Web Security Testing Guide version 4.2, what is the official Test ID assigned to 'Test Ability to Forge Requests'?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the Test ID as WSTG-BUSL-02 | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-BUSL-02
Test Ability to Forge Requests
Request forgery testing examines whether an application properly validates the authenticity and integrity of requests. Attackers may attempt to forge requests by predicting parameters, manipulating tokens, replaying captured requests, or bypassing client-side controls. This test identifies weaknesses that allow attackers to submit unauthorized or manipulated requests that the application incorrectly accepts as legitimate.
| Component | Attack Vector |
|---|---|
| Session tokens | Prediction/brute-force |
| Transaction IDs | Sequential enumeration |
| CSRF tokens | Weak generation |
| Order references | Manipulation |
| Timestamps | Replay attacks |
test cases passed, vs 12 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.