Thread by @steiner254

Day 0⃣4⃣/2⃣0⃣ -- [Hacking A Web Application Via Password Change Functionality]
➡️ Day 4, Hack A Web Application Via "Password Change Functionality"
➡️ Below are Tips & References (Feel Free To Share)🧵🧵👇👇
#BugBounty
#bugbountytips
#cybersecuritytips "No Resting Only Hacking!"

1/n
All about password reset vulnerabilities by @InfoSecComm
infosecwriteups.com/all-about-pass…

2/n
Password reset poisoning and web cache poisoning
skeletonscribe.net/2013/05/practi…

3/n
SESSION DOES NOT EXPIRE AFTER PASSWORD CHANGE
forum.portswigger.net/thread/session…

4/n
CSRF on changing the password
hackerone.com/reports/204703

5/n
Weak Password Reset Implementation - Token Leakage via Host Header Poisoning
medium.com/@sathvika03/we…

6/n
Weak Password Reset Implementation - Rather than generating a new password for the user, some applications will send the user their existing password. This is a very insecure approach, as it exposes their current password over unencrypted email.

7/n
Weak Password Reset Implementation - Token is Not Invalidated After Use

8/n
Password Reset token/link is not invalidated after use

9/n
10 Password Reset Flaws
anugrahsr.github.io/posts/10-Passw…

10/n
Password link encoded in base64.

11/n
Reset password bypassing the current password.

12/n
Password Reset Link Leaked In Refer Header In Request To Third Party Sites
hackerone.com/reports/751581

13/n
Account Takeover via Host Header Injection
securiumsolutions.com/blog/host-head…

14/n
Token leakage via Host Header Injection
vulners.com/hackerone/H1:1…

15/n
Authentication vulnerabilities cheat sheet
cheatsheetseries.owasp.org/cheatsheets/Au…

16/n
Top 5 web app authentication vulnerabilities article
veracode.com/blog/secure-de…

17/n
No Rate Limiting Leading to email flooding
hackerone.com/reports/794395

18/n
Username Enumeration
hackerone.com/reports/77067

19/n
“Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality
infosecwriteups.com/bugbounty-how-…

20/n
Remote Command Execution(RCE) Vulnerability PoC

n/n
Practice Makes Perfect!
Have a lovely weekend, Don't Drink & Drive!
Happy Hacking :)
See you here same time tomorrow!