Advertisement
Guest User

Instagram Change Password Different Account Wait Reset Passw

a guest
Feb 22nd, 2017
3,252
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.09 KB | None | 0 0
  1. ################################################################################
  2. # Exploit Title:Instagram Change Password Different Account Wait Reset Password Link
  3. # Exploit Author: Ashiyane Digital Security Team
  4. # HomaPage:https://instagram.com
  5. ##------------------------------------------------------------------------------------------------------------------------##
  6. #-#Description:
  7. A vulnerability exists in Reset Password Instagram!
  8. With this method we can do with having a reset password link, someone else's account password change
  9. But in this way we can target certain person because we have not discovered yet how it is encoded
  10. In this way there is some kind of random, which is based on the letters or numbers!
  11. For each case we must request a reset password link
  12. -----------------------------------------------------------------------------------
  13. #-#Proof Of Concept
  14. We need to create an account on Instagram or because we must hold the Reset Password link
  15. To reproduce the issue follow the steps below:
  16. 1-Go to the link brackets(https://www.instagram.com/accounts/password/reset/) and will link in Forgot password manager
  17. 2-Enter your details and requested the Forgot password link
  18. 3-Wait until the link sent to your email
  19. 4-Copy the link and start playing!
  20. -----------------------------------------------------------------------------------
  21. Example:https://instagram.com/accounts/password/reset/confirm/1maup6e/4ip-2c60480fd97a0864f0b8ef50a12bb150
  22. #-#PoC:
  23. https://instagram.com/accounts/password/reset/confirm/[Change]/4ip-[Change]/
  24. https://instagram.com/accounts/password/reset/confirm/1maup6a/4ip-2c60480fd97a0864f0b8ef50a12bb152[New Reset Password Link For Other Account]
  25. https://instagram.com/accounts/password/reset/confirm/1maup3e/4ip-2c60480fd97a0864f0b8ef50a12bb150[New Reset Password Link For Other Account]
  26. *You Can make Random rest Password Link*
  27.  
  28. ---------------------------------------------------------------------------------
  29. # Discovered By : Terminator
  30. ---------------------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement