PortSwigger Walkthrough - Password reset broken logic
Walkthrough of PortSwigger's 'Password reset broken logic' lab.
Write-ups / Tag
reset
2 write-ups with this tag.
PortSwigger Walkthrough - Password reset poisoning via middleware
Walkthrough of PortSwigger's 'Password reset poisoning via middleware' lab: steal a reset token by spoofing the X-Forwarded-Host header.