writeups.xyz / Hunting For Password Reset Tokens By Spraying And Using HTTP Pipelining

Submitter : c2a

Date: 30 May 2023

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Account Takeover

Programs :

• Undisclosed

Authors :

• Tom Neaves

Link :
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-password-reset-tokens-by-spraying-and-using-http-pipelining/