This lab contains a password reset mechanism. Although it doesn’t contain a race condition, you can exploit the mechanism’s broken cryptography by sending carefully timed requests. If you receive an…

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

This post provides a lab exercise for exploiting time-sensitive vulnerabilities in a password reset mechanism. It guides readers on identifying the vulnerability, obtaining a valid password reset token, logging in as a user, and accessing the admin panel to delete the user.

9.5 Lab: Exploiting time-sensitive vulnerabilities | 2024