Jason Haddix USES password reset abuse
Jason initiated a password reset for the target account and exploited the resulting reset flow.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“you could start a password reset for any user on the site”
Technique
technique:password_reset_abuse
Also: password-reset attack
Account takeover technique using a password-reset flow that assigned predictable five-character passwords.
Account takeover technique using a password-reset flow that assigned predictable five-character passwords.
“you could start a password reset for any user on the site”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Jason Haddix | Explicit | 130 |
Jason Haddix USES password reset abuse
Jason initiated a password reset for the target account and exploited the resulting reset flow.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“you could start a password reset for any user on the site”