Account Takeover Via Reset Pass Worth $2000 😈

1. Focus on reset password mechanism
2. Intercept request while resetting password (pic)
3. Change mail to [email protected]
4. Password is changed
5. Rewarded $2000
    

Credit

Based on Ashutosh mishra's write-up.
 

Support

You can Follow me on twitter or buy me a Coffee