1. Reproduce the vulnerability using Burp Suite

2. Proxy - HTTP History tab should contain at least 3 HTTP requests

• First request with page contents for CSRF exploitation
• Second request – the actual exploitation of CSRF vulnerability
• Third request with page contents after CSRF exploitation

3. Add comments to request, as shown below


4. Select the requests and save them into file


5. Send the saved file using report form.