OWASP looks great. Found some tools to help test CSRF (bottom of page) https://www.owasp.org/index.php/Testing_for_CSRF_(OWASP-SM-0...

Also found a large PDF about testing with suggestions for tools https://www.owasp.org/images/5/56/OWASP_Testing_Guide_v3.pdf

More tools listed https://www.owasp.org/index.php/Appendix_A:_Testing_Tools