Password reset broken logic (Video solution, Audio)

[@faridlannabi]

it's not necessary to remove the token, just change the username and that's it :)

[@WorldJah-oi4dn]

Thanks man 👍

[@drewmachine]

the second password reset request does not make sense at all. If the token is simply not checked, what is the point in doing a secondary password request for wiener, and then sending the request without a token and with username carlos. I did it without a secondary request.

[@acronproject]

Thank you

[@mustaquemsheikh572]

Can you plzz provide a video for subdomain takeover and ssrf

[@mike-nn1mq]

It was needed to reset 2 times the password of wiener.