---
title: "Discussion on \"Password Reset Poisoning Leading to Account Takeover\" | Hashnode"
description: "Discussion on \"Password Reset Poisoning Leading to Account Takeover\". Overview\nDuring a penetration test of a Web Applications API, I discovered a vulnerability in the password reset functionality that allowed an attacker to intercept reset tokens and take over user accounts. By manipulating a user-controllable field i..."
url: "https://hashnode.com/posts/password-reset-poisoning-leading-to-account-takeover/696a6f62a4452b9b6e82c079"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Password Reset Poisoning Leading to Account Takeover](https://cybersekler.com/password-reset-poisoning-leading-to-account-takeover?utm_source=hashnode&utm_medium=feed)

Overview During a penetration test of a Web Applications API, I discovered a vulnerability in the password reset functionality that allowed an attacker to intercept reset tokens and take over user accounts. By manipulating a user-controllable field i...

Jan 16 · 2 min read · cybersekler.com  
Read the article

-   [#password-reset](https://hashnode.com/tag/password-reset)
-   [#account-takeover](https://hashnode.com/tag/account-takeover)

## Written by

[Cyber Sekler](https://hashnode.com/@CyberSekler)

@CyberSekler · United Kingdom

  
[View profile](https://hashnode.com/@CyberSekler)

Penetration Tester | Ethical Hacker

## Responses

Markdown supported · ⌘↵ to post

No responses yet.