{"record":{"id":"e04c0f702c7667da","repo":"sqlmapproject/sqlmap","slug":"anti-csrf-token-s-can-t-be-found-at-s","errorCode":null,"errorMessage":"anti-CSRF token '%s' can't be found at '%s'","messagePattern":"anti-CSRF token '(.+?)' can't be found at '(.+?)'","errorType":"exception","errorClass":"SqlmapTokenException","httpStatus":null,"severity":"error","filePath":"lib/request/connect.py","lineNumber":1433,"sourceCode":"                    if not token and conf.cj and any(re.search(conf.csrfToken, _.name, re.I) for _ in conf.cj):\n                        for _ in conf.cj:\n                            if re.search(conf.csrfToken, _.name, re.I):\n                                token.name, token.value = _.name, _.value\n                                if not any(re.search(conf.csrfToken, ' '.join(_), re.I) for _ in (conf.paramDict.get(PLACE.GET, {}), conf.paramDict.get(PLACE.POST, {}))):\n                                    if post:\n                                        post = \"%s%s%s=%s\" % (post, conf.paramDel or DEFAULT_GET_POST_DELIMITER, token.name, token.value)\n                                    elif get:\n                                        get = \"%s%s%s=%s\" % (get, conf.paramDel or DEFAULT_GET_POST_DELIMITER, token.name, token.value)\n                                    else:\n                                        get = \"%s=%s\" % (token.name, token.value)\n                                break\n\n            if not token:\n                errMsg = \"anti-CSRF token '%s' can't be found at '%s'\" % (conf.csrfToken._original, conf.csrfUrl or conf.url)\n                if not conf.csrfUrl:\n                    errMsg += \". You can try to rerun by providing \"\n                    errMsg += \"a valid value for option '--csrf-url'\"\n                raise SqlmapTokenException(errMsg)\n\n            if token:\n                token.value = token.value.strip(\"'\\\"\")\n\n                for candidate in (PLACE.GET, PLACE.POST, PLACE.CUSTOM_POST, PLACE.URI):\n                    if candidate in conf.parameters:\n                        if candidate == PLACE.URI and uri:\n                            uri = _adjustParameter(uri, token.name, token.value)\n                        elif candidate == PLACE.GET and get:\n                            get = _adjustParameter(get, token.name, token.value)\n                        elif candidate in (PLACE.POST, PLACE.CUSTOM_POST) and post:\n                            post = _adjustParameter(post, token.name, token.value)\n\n                for i in xrange(len(conf.httpHeaders)):\n                    if conf.httpHeaders[i][0].lower() == token.name.lower():\n                        conf.httpHeaders[i] = (conf.httpHeaders[i][0], token.value)\n\n        if conf.rParam:","sourceCodeStart":1415,"sourceCodeEnd":1451,"githubUrl":"https://github.com/sqlmapproject/sqlmap/blob/0a35b20e3953d341be6c7ac75ccb0b3362540c8d/lib/request/connect.py#L1415-L1451","documentation":"Error \"anti-CSRF token '%s' can't be found at '%s'\" thrown in sqlmapproject/sqlmap.","triggerScenarios":"Thrown at lib/request/connect.py:1433 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"0a35b20e3953d341be6c7ac75ccb0b3362540c8d","analyzedAt":"2026-08-26T23:02:52.002Z","schemaVersion":2},"datasetVersion":"2026-08-27T03:17:27.898Z"}