OWASP looks great. Found some tools to help test CSRF (bottom of page) https://www.owasp.org/index.php/Testing_for_CSRF_(OWASP-SM-005) https://www.owasp.org/ind

OWASP looks great. Found some tools to help test CSRF (bottom of page) https://www.owasp.org/index.php/Testing_for_CSRF_(OWASP-SM-005) https://www.owasp.org/index.php/Testing_for_CSRF_(OWASP-SM-0... Also found a large PDF about testing with suggestions for tools https://www.owasp.org/images/5/56/OWASP_Testing_Guide_v3.pdf https://www.owasp.org/images/5/56/OWASP_Testing_Guide_v3.pdf More tools listed https://www.owasp.org/index.php/Appendix_A:_Testing_Tools https://www.owasp.org/index.php/Appendix_A:_Testing_Tools