OldMail emails you a password-reset link with a token. The trouble is the token is not random at all — it is the user's id and the current time, base64-encoded. Anything you can predict, you can forge, and the admin's id is 1. Lab at a glance: Intermediate · 90 XP · about 15 minutes · runs in your browser, no signup or setup. Try it yourself first; the full solution is behind a spoiler below. [se_lab_cta id="password-reset-1"] 📋 In…
No comments:
Post a Comment