文中详细阐述了攻击者利用跨站伪造请求(CSRF)的方法来远程对网络设备开展攻击渗透的具体方法与步骤,阐明通过用户浏览器提交相关命令的操作过程,相关漏洞攻击的例子可有利于建立安全研究和安全审计的概念。 The paper elaborates on the specific methods and steps for attacker to exploit cross-site forgery request (CSRF) method to penetrate attacks on network devices remotely. The procedure of submitting related commands through user’s browser is illustrated. Examples of related vulnerability attacks may be helpful Establish the concept of safety research and safety audit.