Это видео недоступно.
Сожалеем об этом.
Account Take Over via Forgot Password Function
HTML-код
- Опубликовано: 22 июн 2022
- Forgot Password function allows the application users to reset their password if they forgot their account password. If a web application doesn’t implement a secure forgot password function this would allow an attacker to reset the application users password and take over their account. During this video we look at this scenario in action.
NOTE: This video is made ONLY for educational purposes and to help developers and security researchers to enhance their security knowledge. Therefore, allowing them remediate potential vulnerabilities in their OWN applications.
Web Security Academy | Lab: Password reset broken logic:
portswigger.ne...
Twitter: / tracethecode
its a perfect metod to learn
You are the best brother.
Take Love😍😍💞💞💞
Thanks.
Gracias por compartir tus conocimientos
My Pleasure!
Thanks for knowledge ❤️
My pleasure 😊
thanks
If my pc has malware and I reset or format the pc, will the malware be deleted?
I Deleted the file and from the trash.
Will I be able to format the pc and be calm?
No
@@freedom4all931 what can I do? No I cant see the file and none antivirus detected it
@@tigreonice2339 destroy it and change hd.
When I send it, It says bad request how to fix that
It say in the response tab “invalid csrf token (session does not contain a csrf token)” but when I remove it it says missing parameter
If that's the case for you, I suggest to follow these steps 1)request a new password reset link 2) Click on the PW reset link in the email inbox 3) turn on burp intercept 4) choose the new password in the forgot password page 5) submit the request 6) go to the captured request in Burp and change the username parameter value to carlos and forward the request.
How do i get burp suite for free?