Weak Password Reset Implementation

 Forget Password Link Over HTTP  (Password Reset Token Sent Over HTTP)

However, sending this password reset token over HTTP poses a security risk. HTTP is not encrypted, which means that any data transmitted over this protocol can be intercepted and read by malicious actors. Attackers could potentially intercept the password reset token, gain unauthorized access to the user's account, and reset the password themselves.

Using HTTPS for transmitting password reset tokens adds an extra layer of security, making it significantly harder for attackers to intercept and exploit the token. It helps protect users' accounts and ensures the confidentiality and integrity of the password reset process.

Hello Hackers,

Hope you guys Doing well and hunting lots of bugs and Dollars!

For today we are going to talk about some web security vulnerability, which occurs on password reset token over HTTP functionality. So for today, we will see a brief methodology and approach for finding bugs in this very common functionality

How to Find ?

STEP #1: Create an account on any website.

STEP #2: Then go to login option and generate forget password link .

STEP #3: Open your Gmail and copy link by right click on reset your password option

STEP #4: Go to notepad and paste the link then you can see that forget password link is on http whereas whole site is on https.

Impact

• Using a "forget password" link over HTTP can have significant security risks, including potential interception of sensitive information, man-in-the-middle attacks, information disclosure, and increased vulnerability to phishing attacks. It is strongly advised to use HTTPS for password-related operations to ensure encryption, data integrity, and user authentication.

• HTTP does not provide encryption for data transmitted between the user's browser and the server. This means that any information, including the password reset link, can be intercepted and read by attackers if they have access to the network. This puts the user's account at risk of being compromised.

Mitigation

To mitigate the risks of using a "forget password" link over HTTP, the following steps should be taken:

1. Implement HTTPS for all password-related operations.

2. Use secure protocols and standards for password management.

3. Enforce strong password complexity requirements.

4. Employ secure token generation methods.

                    How to Report ?

Hello Team                        

                  I'm Career Technology Cyber Security India a white security researcher from Mumbai INDIA, founded on your website for password policy.

Vulnerability Name :   Forgot Password link on http

What is Password Policy ?

A password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly. A password policy is often part of an organization's official regulations.

Vulnerable URL :

https://www.example.com/

Steps to reproduce ?

1.Simply visit the above URL

2.create an account & logout .

3.Click the forgot password link

4.and send the forget password link on email

5.Go to the email & Right click the Forgot password link

6. now copy the forget password link  & paste the notepad.

7.now look at your forget password link still working http.

Impact :

Hackers can steal any information on a website which can affect the website popularity and your subscripted user's Data.

Solution:

Through website developer make the changes in password policy

Thank You :)

Career Technology Cyber Security India

Indian Bug Hunter