Day 0⃣4⃣/2⃣0⃣ -- [Hacking A Web Application Via Password Change Functionality]
➡️ Day 4, Hack A Web Application Via "Password Change Functionality"
➡️ Below are Tips & References (Feel Free To Share)🧵🧵👇👇
#BugBounty
#bugbountytips
#cybersecuritytips "No Resting Only Hacking!"
➡️ Day 4, Hack A Web Application Via "Password Change Functionality"
➡️ Below are Tips & References (Feel Free To Share)🧵🧵👇👇
#BugBounty
#bugbountytips
#cybersecuritytips "No Resting Only Hacking!"
5/n
Weak Password Reset Implementation - Token Leakage via Host Header Poisoning
@sathvika03/weak-registration-implementation-64c94c702a7c" target="_blank" rel="noopener" onclick="event.stopPropagation()">medium.com
Weak Password Reset Implementation - Token Leakage via Host Header Poisoning
@sathvika03/weak-registration-implementation-64c94c702a7c" target="_blank" rel="noopener" onclick="event.stopPropagation()">medium.com
6/n
Weak Password Reset Implementation - Rather than generating a new password for the user, some applications will send the user their existing password. This is a very insecure approach, as it exposes their current password over unencrypted email.
Weak Password Reset Implementation - Rather than generating a new password for the user, some applications will send the user their existing password. This is a very insecure approach, as it exposes their current password over unencrypted email.
7/n
Weak Password Reset Implementation - Token is Not Invalidated After Use
Weak Password Reset Implementation - Token is Not Invalidated After Use
19/n
“Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality
infosecwriteups.com
“Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality
infosecwriteups.com
n/n
Practice Makes Perfect!
Have a lovely weekend, Don't Drink & Drive!
Happy Hacking :)
See you here same time tomorrow!
Practice Makes Perfect!
Have a lovely weekend, Don't Drink & Drive!
Happy Hacking :)
See you here same time tomorrow!
Loading suggestions...