Time to Reset - II
As announced, this is a sequel to the TTR challenge.
has proven that it is solveable, and an awesome exploit. Again you have to submit the password reset
token for the user firstname.lastname@example.org
Please note that your tokens are bound to your session.
You probably want to take a look at the sourcecode
, also available in a highlighted version
Thanks go to noother for proving that stuff can still be owned in creative ways :)
© 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022 and 2023 by Gizmore