CSRF spotter Malm מאת

It simply finds forms without hidden inputs.
Expect lots of false positives and false negatives!