Paper: Automated detection of CSRF-worthy HTML forms through 4-pass reverse-Diff analysis

Arachni: Probe

Arachni::Spider demo