Web Security Academy – Cybersecurity Training from PortSwigger
https://portswigger.net/web-security * we covered CSRF
* You should register a free account there, and use it to measure your progress. We may review some of these lessons during future meetings, so having a registered account ahead is time will be useful.