For demonstrating a CSRF attack sending JSON data using Flash.
docker build -t json-csrf .
docker run -p 8000:80 json-csrf
Now, browse to the following URL, replacing the JSON_DATA with the JSON data that should be sent and the TARGET_ENDPOINT with the endpoint of the vulnerable application: