What is the main purpose of Cross-Site Request Forgery

Solution

Cross-Site Request Forgery (CSRF) exploits the trust a web application has in the user’s browser. By tricking a user into submitting an unwanted request (usually through an image or link), an attacker can perform actions on behalf of the user without their consent. This can lead to actions such as changing account settings, making purchases, or transferring funds. CSRF attacks often rely on the fact that a user is authenticated and has an active session with the targeted website, thus allowing unauthorized commands to be executed. Option A is incorrect because CSRF does not manipulate user input but exploits the user's session. Option C is incorrect because executing scripts is characteristic of XSS, not CSRF. Option D is incorrect as it describes DDoS attacks rather than CSRF. Option E is incorrect because encryption of data relates to securing transmission, not unauthorized requests.