Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ################################################################################
- # Exploit Title:Instagram Change Password Different Account Wait Reset Password Link
- # Exploit Author: Ashiyane Digital Security Team
- # HomaPage:https://instagram.com
- ##------------------------------------------------------------------------------------------------------------------------##
- #-#Description:
- A vulnerability exists in Reset Password Instagram!
- With this method we can do with having a reset password link, someone else's account password change
- But in this way we can target certain person because we have not discovered yet how it is encoded
- In this way there is some kind of random, which is based on the letters or numbers!
- For each case we must request a reset password link
- -----------------------------------------------------------------------------------
- #-#Proof Of Concept
- We need to create an account on Instagram or because we must hold the Reset Password link
- To reproduce the issue follow the steps below:
- 1-Go to the link brackets(https://www.instagram.com/accounts/password/reset/) and will link in Forgot password manager
- 2-Enter your details and requested the Forgot password link
- 3-Wait until the link sent to your email
- 4-Copy the link and start playing!
- -----------------------------------------------------------------------------------
- Example:https://instagram.com/accounts/password/reset/confirm/1maup6e/4ip-2c60480fd97a0864f0b8ef50a12bb150
- #-#PoC:
- https://instagram.com/accounts/password/reset/confirm/[Change]/4ip-[Change]/
- https://instagram.com/accounts/password/reset/confirm/1maup6a/4ip-2c60480fd97a0864f0b8ef50a12bb152[New Reset Password Link For Other Account]
- https://instagram.com/accounts/password/reset/confirm/1maup3e/4ip-2c60480fd97a0864f0b8ef50a12bb150[New Reset Password Link For Other Account]
- *You Can make Random rest Password Link*
- ---------------------------------------------------------------------------------
- # Discovered By : Terminator
- ---------------------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement