Password reset vulnerability on a website!

[fgf]

I wish it worked like this 😭😭😭 they're not gonna get the email with your website

[shriram]

Who the hell generates the reset token on the frontend?

[hyperkiko]

only downside is that most reset emails say to ignore it if you did not trigger it.

[codermomo]

If the host is changed to attcker ip then how the request went to the server? And not the attackers

[fallegapyro]

That is stupid! He's saying utter shite

[adekojoadeyemi]

Funny 😂 if you change the host url to the attacker url, it will be making a request to attacker server and not the actual website server. So this video is junk bro 😂 and doesn't make any sense