Scribd Logo
Upload

Welcome to Scribd!

  • 158 views

    1 Web App Hacking Password Reset Functionality m1 Slides

    Uploaded by

    sebyh
    This document summarizes common attacks against password reset functionality on web applications, including leakage of password reset links, insecure direct object references, insecure session management, weaknesses in the lifecycle of password reset links, and user enumeration. It describes common implementations of password reset such as password reset links sent via email, generating new passwords, and secret question and answer authentication. The document warns that password reset is a very sensitive operation that can enable account takeover if not implemented securely.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    1 Web App Hacking Password Reset Functionality m1 Slides

    Uploaded by

    sebyh
    158 views8 pages
    This document summarizes common attacks against password reset functionality on web applications, including leakage of password reset links, insecure direct object references, insecure session management, weaknesses in the lifecycle of password reset links, and user enumeration. It describes common implementations of password reset such as password reset links sent via email, generating new passwords, and secret question and answer authentication. The document warns that password reset is a very sensitive operation that can enable account takeover if not implemented securely.

    Original Description:

    asd

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document summarizes common attacks against password reset functionality on web applications, including leakage of password reset links, insecure direct object references, insecure session management, weaknesses in the lifecycle of password reset links, and user enumeration. It describes common implementations of password reset such as password reset links sent via email, generating new passwords, and secret question and answer authentication. The document warns that password reset is a very sensitive operation that can enable account takeover if not implemented securely.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    158 views8 pages

    1 Web App Hacking Password Reset Functionality m1 Slides

    Uploaded by

    sebyh
    This document summarizes common attacks against password reset functionality on web applications, including leakage of password reset links, insecure direct object references, insecure session management, weaknesses in the lifecycle of password reset links, and user enumeration. It describes common implementations of password reset such as password reset links sent via email, generating new passwords, and secret question and answer authentication. The document warns that password reset is a very sensitive operation that can enable account takeover if not implemented securely.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 8

    Web App Hacking:

    Hacking Password Reset Functionality


    INTRODUCTION

    Dawid Czagan

    SECURITY INSTRUCTOR

    @dawidczagan

    Overview
    Password reset functionality
    Implementations
    Attacks

    Very sensitive
    operation
    Account takeover

    Password Reset Functionality

    Password reset link


    Generating new
    password
    Secret question
    and answer

    Implementations

    https://example.com/reset.php?token=38d527c93b748a2
    https://example.com/reset.php?userID=3451&token=38d527c93b748a2

    Password Reset Link


    Sent to users email address
    Valid for a short period of time

    Generating New
    Password

    Password sent in plaintext


    Insecurely stored for a long time
    Malware

    Whats the name of your first school?

    Secret Question
    and Answer

    Whats your mother's maiden name?


    Answers are not secret
    Social media

    1. Leakage of Password Reset Link


    2. Insecure Direct Object Reference

    Attacks

    3. Insecure Session Management


    4. Weaknesses in Lifecycle of
    Password Reset Link
    5. User Enumeration

    You might also like