dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Small update for password reset lesson

Browse Source
This commit is contained in:
Nanne Baars
2019-05-09 09:17:11 +02:00
parent 2a5e8dfdac
commit 00deb66ad9
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_host_header.adoc
View File

@ -13,7 +13,8 @@ The time out is necessary to restrict the attack window, having a link opens up
== Assignment
Try to reset the password of Tom (tom@webgoat-cloud.org) to your own choice and login as Tom with
that password. Note: it is not possible to use OWASP ZAP for this lesson.
that password. Note: it is not possible to use OWASP ZAP for this lesson, also browsers might not work, command line
tools like `curl` and the like will be more successful for this attack.
Tom always resets his password immediately after receiving the email with the link.